c\xa2>x;\xde\xb3_\x05R\xfe\xfcq\xd7\xa5\x15\x9f\x89I\xfd<\xef\x8f#7\x11\xf2\xbf\x8cK\xff\x1d\xf6\a\xfal\xb7\x9e\x90\xa1\x8dO\xf3\\t\r\x81*Mo\xa4\xaa|r)\xd0\x19\x06z\xb4\b\xfc\x85@\x1d1\xa8\x1aJ\xe5\x8d\x9c\xc4\xda\x0e\v\x03Fz\xfb\xf4s\xed\x934A)\xa0:4\x1a\xef\x11e{#7\xcd\xa2}\xe8\x86\xc1:\xfb\xd7SI\x7fwC\x9c\xc3!=\xa2S\x19t-\xb5\xbc\x15Ser\xa2\xd5n\x9c\x01\x9dkP\x94k*$\xd0\xbd\x1e\x92W\xfb\xc4y\x93\x11\x00\x00\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) 22:55:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfa02, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81024e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 1801.652348][ T28] audit: type=1326 audit(1600210527.076:1268): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10968 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1801.663814][T10972] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:27 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 22:55:27 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc050560f, &(0x7f0000000780)={0x0, 0x4, @raw_data}) 22:55:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfa03, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400add427323b472545b45602117fffffff81024e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 22:55:27 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x802, 0x0) r1 = memfd_create(&(0x7f00000000c0)='X\xaa\xb3\xb0\x0ef\x1c\xa2>x;\xde\xb3_\x05R\xfe\xfcq\xd7\xa5\x15\x9f\x89I\xfd<\xef\x8f#7\x11\xf2\xbf\x8cK\xff\x1d\xf6\a\xfal\xb7\x9e\x90\xa1\x8dO\xf3\\t\r\x81*Mo\xa4\xaa|r)\xd0\x19\x06z\xb4\b\xfc\x85@\x1d1\xa8\x1aJ\xe5\x8d\x9c\xc4\xda\x0e\v\x03Fz\xfb\xf4s\xed\x934A)\xa0:4\x1a\xef\x11e{#7\xcd\xa2}\xe8\x86\xc1:\xfb\xd7SI\x7fwC\x9c\xc3!=\xa2S\x19t-\xb5\xbc\x15Ser\xa2\xd5n\x9c\x01\x9dkP\x94k*$\xd0\xbd\x1e\x92W\xfb\xc4y\x93\x11\x00\x00\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) [ 1802.352109][T10982] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1802.454284][ T28] audit: type=1326 audit(1600210527.876:1269): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10968 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:28 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc050560f, &(0x7f0000000780)={0x0, 0x4, @raw_data}) 22:55:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xce000}, {0x4c}, {0x6}]}) 22:55:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfb00, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x2a, &(0x7f0000e530e9)=""/16, &(0x7f0000000100)=0x10) [ 1802.998407][ T28] audit: type=1326 audit(1600210528.426:1270): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10993 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1803.051750][T10997] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:28 executing program 5: unshare(0x8000400) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20a001, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) 22:55:28 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x802, 0x0) r1 = memfd_create(&(0x7f00000000c0)='X\xaa\xb3\xb0\x0ef\x1c\xa2>x;\xde\xb3_\x05R\xfe\xfcq\xd7\xa5\x15\x9f\x89I\xfd<\xef\x8f#7\x11\xf2\xbf\x8cK\xff\x1d\xf6\a\xfal\xb7\x9e\x90\xa1\x8dO\xf3\\t\r\x81*Mo\xa4\xaa|r)\xd0\x19\x06z\xb4\b\xfc\x85@\x1d1\xa8\x1aJ\xe5\x8d\x9c\xc4\xda\x0e\v\x03Fz\xfb\xf4s\xed\x934A)\xa0:4\x1a\xef\x11e{#7\xcd\xa2}\xe8\x86\xc1:\xfb\xd7SI\x7fwC\x9c\xc3!=\xa2S\x19t-\xb5\xbc\x15Ser\xa2\xd5n\x9c\x01\x9dkP\x94k*$\xd0\xbd\x1e\x92W\xfb\xc4y\x93\x11\x00\x00\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) 22:55:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x2a, &(0x7f0000e530e9)=""/16, &(0x7f0000000100)=0x10) [ 1803.774501][ T28] audit: type=1326 audit(1600210529.196:1271): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10993 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:29 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 22:55:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfb01, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:29 executing program 5: unshare(0x8000400) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20a001, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) 22:55:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x2a, &(0x7f0000e530e9)=""/16, &(0x7f0000000100)=0x10) 22:55:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xd0000}, {0x4c}, {0x6}]}) 22:55:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) open(&(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) ftruncate(r0, 0x20000a) r1 = socket$inet6(0xa, 0x5, 0x0) close(r1) open(&(0x7f00000002c0)='./file0\x00', 0x577902, 0x0) sendfile(r1, r0, 0x0, 0x80001d00c0d0) [ 1804.089156][T11011] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1804.231171][ T28] audit: type=1326 audit(1600210529.656:1272): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11016 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x2a, &(0x7f0000e530e9)=""/16, &(0x7f0000000100)=0x10) 22:55:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfb02, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:29 executing program 5: unshare(0x8000400) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20a001, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) [ 1804.807740][T11028] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:30 executing program 5: unshare(0x8000400) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20a001, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) [ 1805.024445][ T28] audit: type=1326 audit(1600210530.446:1273): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11016 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 22:55:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfb03, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1805.333739][T11035] input: syz1 as /devices/virtual/input/input50 [ 1805.394325][T11040] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1805.521019][T11035] input: syz1 as /devices/virtual/input/input51 22:55:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 22:55:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x921, 0x0) 22:55:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xd2000}, {0x4c}, {0x6}]}) 22:55:31 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000d44000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000035f000/0x2000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 22:55:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfc00, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:31 executing program 2: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='squashfs\x00', 0x0, &(0x7f00000001c0)='cgroup.controllers\x00') [ 1805.898208][T11050] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1806.005858][ T28] audit: type=1326 audit(1600210531.436:1274): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1806.024129][T11061] squashfs: Unknown parameter 'cgroup.controllers' 22:55:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfc01, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1806.083837][T11064] squashfs: Unknown parameter 'cgroup.controllers' 22:55:31 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x99, 0x0, &(0x7f0000000080)) 22:55:31 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000d44000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000035f000/0x2000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 22:55:31 executing program 2: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='squashfs\x00', 0x0, &(0x7f00000001c0)='cgroup.controllers\x00') [ 1806.410389][T11068] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfc02, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1806.719466][T11076] squashfs: Unknown parameter 'cgroup.controllers' [ 1806.795727][ T28] audit: type=1326 audit(1600210532.226:1275): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11057 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:32 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000d44000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000035f000/0x2000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 1807.053437][T11080] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:32 executing program 2: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='squashfs\x00', 0x0, &(0x7f00000001c0)='cgroup.controllers\x00') 22:55:32 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x99, 0x0, &(0x7f0000000080)) 22:55:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xd4000}, {0x4c}, {0x6}]}) 22:55:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfc03, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:32 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000d44000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000035f000/0x2000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 1807.573909][ T28] audit: type=1326 audit(1600210532.996:1276): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11085 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1807.602062][T11091] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1807.657457][T11093] squashfs: Unknown parameter 'cgroup.controllers' 22:55:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0xc01, 0x3, 0x228, 0xf8, 0x5002004a, 0x0, 0x0, 0x0, 0x270, 0x3c8, 0x3c8, 0x270, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'vlan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'wg2\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 22:55:33 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x99, 0x0, &(0x7f0000000080)) 22:55:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1807.892219][T11096] kvm_hv_get_msr: 53 callbacks suppressed [ 1807.892269][T11096] kvm [11095]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 [ 1807.932233][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000008c 22:55:33 executing program 2: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='squashfs\x00', 0x0, &(0x7f00000001c0)='cgroup.controllers\x00') [ 1807.973482][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000006c [ 1807.998428][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000006d [ 1808.011173][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000043 [ 1808.043607][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000014 [ 1808.092201][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000054 [ 1808.131669][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000044 [ 1808.162056][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000008c [ 1808.227868][T11096] kvm [11095]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000057 [ 1808.246963][T11107] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1808.302954][T11108] squashfs: Unknown parameter 'cgroup.controllers' 22:55:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) [ 1808.398700][ T28] audit: type=1326 audit(1600210533.826:1277): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11085 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd01, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:34 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x99, 0x0, &(0x7f0000000080)) 22:55:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xd6000}, {0x4c}, {0x6}]}) 22:55:34 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xa0002014}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 22:55:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1808.950565][T11124] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1809.011197][ T28] audit: type=1326 audit(1600210534.436:1278): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11123 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 22:55:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd02, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:34 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xa0002014}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 22:55:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x41}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c20000000180c200000086dd60"], 0x7a) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) [ 1809.447587][T11136] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 22:55:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd03, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1809.798815][ T28] audit: type=1326 audit(1600210535.227:1279): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11123 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:35 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xa0002014}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 22:55:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xd8000}, {0x4c}, {0x6}]}) [ 1810.056285][T11151] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 22:55:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfe00, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1810.313660][ T28] audit: type=1326 audit(1600210535.737:1280): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11159 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:35 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xa0002014}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 22:55:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 22:55:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000008}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:55:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) [ 1811.038818][T11165] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1811.079672][ T28] audit: type=1326 audit(1600210536.497:1281): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11159 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x41}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c20000000180c200000086dd60"], 0x7a) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 22:55:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 22:55:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfe01, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xda000}, {0x4c}, {0x6}]}) 22:55:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) [ 1811.701874][ T28] audit: type=1326 audit(1600210537.117:1282): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11186 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 22:55:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 22:55:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfe02, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1812.077380][T11202] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 22:55:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000011c0)={0x1, 'batadv_slave_1\x00', {}, 0x4}) 22:55:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfe03, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) [ 1812.511746][ T28] audit: type=1326 audit(1600210537.927:1283): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11186 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1812.808833][T11210] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1812.859091][T11213] device syzkaller1 entered promiscuous mode 22:55:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x41}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c20000000180c200000086dd60"], 0x7a) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 22:55:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 22:55:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 22:55:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xdc000}, {0x4c}, {0x6}]}) 22:55:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff00, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1813.406237][T11232] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1813.417799][ T28] audit: type=1326 audit(1600210538.837:1284): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11227 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000011c0)={0x1, 'batadv_slave_1\x00', {}, 0x4}) 22:55:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff01, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000011c0)={0x1, 'batadv_slave_1\x00', {}, 0x4}) 22:55:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8009}, 0xff6d) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000140)="200000001a000100f2ffff65835f7f081c14000000ff00000000000004001300", 0x20) [ 1813.988636][T11243] device syzkaller1 entered promiscuous mode [ 1814.037232][T11250] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1814.123284][T11251] device syzkaller1 entered promiscuous mode [ 1814.208022][ T28] audit: type=1326 audit(1600210539.627:1285): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11227 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff02, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:39 executing program 5: socket(0x2000000000000021, 0x2, 0x10000000000002) 22:55:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xde000}, {0x4c}, {0x6}]}) [ 1814.681495][ T28] audit: type=1326 audit(1600210540.097:1286): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1815.471277][ T28] audit: type=1326 audit(1600210540.887:1287): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1815.655690][T11262] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)={0x41}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c20000000180c200000086dd60"], 0x7a) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 22:55:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0xc324a2385398d00d}, 0x14}}, 0x0) 22:55:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xe0000}, {0x4c}, {0x6}]}) 22:55:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000011c0)={0x1, 'batadv_slave_1\x00', {}, 0x4}) 22:55:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff03, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000011c0)={0x1, 'batadv_slave_1\x00', {}, 0x4}) [ 1816.001038][ T28] audit: type=1326 audit(1600210541.417:1288): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11275 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1816.165554][T11287] device syzkaller1 entered promiscuous mode [ 1816.177228][T11290] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0xc324a2385398d00d}, 0x14}}, 0x0) 22:55:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x19910, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000011c0)={0x1, 'batadv_slave_1\x00', {}, 0x4}) [ 1816.774999][ T28] audit: type=1326 audit(1600210542.197:1289): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11275 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1816.875458][T11300] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1816.945605][T11303] device syzkaller1 entered promiscuous mode 22:55:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0xc324a2385398d00d}, 0x14}}, 0x0) 22:55:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xe2000}, {0x4c}, {0x6}]}) 22:55:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1817.345718][ T28] audit: type=1326 audit(1600210542.767:1290): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11314 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1817.692243][T11319] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000011c0)={0x1, 'batadv_slave_1\x00', {}, 0x4}) 22:55:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0xc324a2385398d00d}, 0x14}}, 0x0) 22:55:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x266f0, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:43 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xa0, 0xd3, 0xc4, 0x20, 0x54c, 0x6c1, 0x5b8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x22, 0xe9}}]}}]}}, 0x0) [ 1818.085648][T11324] device syzkaller1 entered promiscuous mode [ 1818.097384][T11328] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6b) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x1, 0x0) getsockopt(r2, 0x800000010f, 0x83, &(0x7f00004ad000), &(0x7f0000000000)=0xfffffffffffffd8a) [ 1818.155968][ T28] audit: type=1326 audit(1600210543.577:1291): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11314 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xe4000}, {0x4c}, {0x6}]}) 22:55:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x30000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:43 executing program 5: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/132, 0x84}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x1) write(r1, &(0x7f0000335000), 0xfcb7) [ 1818.496928][ T27] usb 5-1: new high-speed USB device number 88 using dummy_hcd 22:55:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6b) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x1, 0x0) getsockopt(r2, 0x800000010f, 0x83, &(0x7f00004ad000), &(0x7f0000000000)=0xfffffffffffffd8a) [ 1818.543134][ T28] audit: type=1326 audit(1600210543.957:1292): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11339 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1818.746460][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 1818.864298][ T27] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=5b.8f [ 1818.873850][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.972232][ T27] usb 5-1: config 0 descriptor?? [ 1819.041164][ T27] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint 22:55:44 executing program 5: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/132, 0x84}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x1) write(r1, &(0x7f0000335000), 0xfcb7) [ 1819.188348][T11342] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1819.219119][T22371] usb 5-1: USB disconnect, device number 88 [ 1819.340745][ T28] audit: type=1326 audit(1600210544.757:1293): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11339 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:44 executing program 3: syz_emit_ethernet(0x2000014a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "400600", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 22:55:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6b) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x1, 0x0) getsockopt(r2, 0x800000010f, 0x83, &(0x7f00004ad000), &(0x7f0000000000)=0xfffffffffffffd8a) 22:55:44 executing program 5: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/132, 0x84}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x1) write(r1, &(0x7f0000335000), 0xfcb7) 22:55:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xe6000}, {0x4c}, {0x6}]}) [ 1819.612473][T11371] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1819.861015][ T28] audit: type=1326 audit(1600210545.277:1294): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11376 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1820.018544][T22371] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1820.272920][T22371] usb 5-1: Using ep0 maxpacket: 32 [ 1820.393948][T22371] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=5b.8f [ 1820.403378][T22371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.421279][T22371] usb 5-1: config 0 descriptor?? [ 1820.464995][T22371] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1820.594716][ T28] audit: type=1326 audit(1600210546.017:1295): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11376 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1820.683211][T22371] usb 5-1: USB disconnect, device number 89 22:55:46 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xa0, 0xd3, 0xc4, 0x20, 0x54c, 0x6c1, 0x5b8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x22, 0xe9}}]}}]}}, 0x0) 22:55:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8001}, 0xff1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6b) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x1, 0x0) getsockopt(r2, 0x800000010f, 0x83, &(0x7f00004ad000), &(0x7f0000000000)=0xfffffffffffffd8a) 22:55:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:46 executing program 5: pipe(&(0x7f00005dcff8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/132, 0x84}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x1) write(r1, &(0x7f0000335000), 0xfcb7) 22:55:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xe8000}, {0x4c}, {0x6}]}) [ 1820.880753][T11396] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1820.927032][T11401] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1820.981289][ T28] audit: type=1326 audit(1600210546.397:1296): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11398 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000001400)='/dev/zero\x00', 0x2201, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:55:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x400300, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:46 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x4}) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 22:55:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8001}, 0xff1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1821.272754][T22371] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1821.351142][T11413] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1821.514909][T22371] usb 5-1: Using ep0 maxpacket: 32 [ 1821.534134][T11419] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 22:55:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000001400)='/dev/zero\x00', 0x2201, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 1821.634163][T22371] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=5b.8f [ 1821.643752][T22371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:55:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1821.720679][T22371] usb 5-1: config 0 descriptor?? [ 1821.758565][ T28] audit: type=1326 audit(1600210547.177:1297): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11398 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1821.774962][T22371] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1822.000064][T22371] usb 5-1: USB disconnect, device number 90 [ 1822.029589][T11428] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:48 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xa0, 0xd3, 0xc4, 0x20, 0x54c, 0x6c1, 0x5b8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x22, 0xe9}}]}}]}}, 0x0) 22:55:48 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x4}) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 22:55:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8001}, 0xff1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:55:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xea000}, {0x4c}, {0x6}]}) 22:55:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000001400)='/dev/zero\x00', 0x2201, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 1822.671731][T11443] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1822.726150][ T28] audit: type=1326 audit(1600210548.137:1298): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11440 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1822.734339][T11446] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. 22:55:48 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x4}) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 22:55:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f0000001400)='/dev/zero\x00', 0x2201, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 22:55:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8001}, 0xff1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1823.113169][T11149] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1823.169629][T11456] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:48 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x4}) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) [ 1823.366006][T11460] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1823.374370][T11149] usb 5-1: Using ep0 maxpacket: 32 22:55:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1823.513979][T11149] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=5b.8f [ 1823.523319][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.599753][T11149] usb 5-1: config 0 descriptor?? [ 1823.650194][T11149] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1823.734945][T11467] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1823.873000][T11149] usb 5-1: USB disconnect, device number 91 22:55:49 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xa0, 0xd3, 0xc4, 0x20, 0x54c, 0x6c1, 0x5b8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x22, 0xe9}}]}}]}}, 0x0) 22:55:49 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xff2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) accept4(r0, &(0x7f0000000080)=@pppol2tp, 0x0, 0x0) 22:55:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc9, 0x20, 0x46d, 0x8dd, 0x6b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfb, 0x3, 0xc7}}]}}]}}, 0x0) 22:55:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xec000}, {0x4c}, {0x6}]}) 22:55:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) 22:55:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1824.579365][ T28] audit: type=1326 audit(1600210549.997:1299): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11481 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1824.600091][T11487] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:50 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xff2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) accept4(r0, &(0x7f0000000080)=@pppol2tp, 0x0, 0x0) 22:55:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1824.763458][T11149] usb 5-1: new high-speed USB device number 92 using dummy_hcd 22:55:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) [ 1824.923351][ T3228] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1825.017898][T11498] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1825.027287][T11149] usb 5-1: Using ep0 maxpacket: 32 22:55:50 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xff2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) accept4(r0, &(0x7f0000000080)=@pppol2tp, 0x0, 0x0) [ 1825.153737][T11149] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=5b.8f [ 1825.163109][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.172602][ T3228] usb 4-1: Using ep0 maxpacket: 32 [ 1825.264139][T11149] usb 5-1: config 0 descriptor?? 22:55:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1825.304410][T11149] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint 22:55:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) [ 1825.380161][ T28] audit: type=1326 audit(1600210550.797:1300): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11481 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1825.507304][ T3228] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=6b.52 [ 1825.516711][ T3228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.525126][ T3228] usb 4-1: Product: syz [ 1825.529480][ T3228] usb 4-1: Manufacturer: syz [ 1825.534446][ T3228] usb 4-1: SerialNumber: syz [ 1825.583303][T11149] usb 5-1: USB disconnect, device number 92 [ 1825.786003][ T3228] usb 4-1: config 0 descriptor?? [ 1825.830051][ T3228] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1826.033300][ T3228] gspca_zc3xx: reg_w_i err -71 [ 1826.038439][ T3228] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 1826.063416][ T3228] usb 4-1: USB disconnect, device number 55 22:55:51 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xff2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) accept4(r0, &(0x7f0000000080)=@pppol2tp, 0x0, 0x0) 22:55:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xee000}, {0x4c}, {0x6}]}) [ 1826.295848][ T28] audit: type=1326 audit(1600210551.718:1301): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11526 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1826.812883][ T27] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1827.076185][ T28] audit: type=1326 audit(1600210552.498:1302): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11526 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1827.097029][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 1827.412566][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=6b.52 [ 1827.421838][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.430152][ T27] usb 4-1: Product: syz [ 1827.434590][ T27] usb 4-1: Manufacturer: syz [ 1827.439312][ T27] usb 4-1: SerialNumber: syz [ 1827.447425][ T27] usb 4-1: config 0 descriptor?? [ 1827.499422][ T27] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd 22:55:53 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x4040, 0x0) truncate(&(0x7f0000000080)='./file0/bus\x00', 0x2) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) open(&(0x7f0000000100)='./file0/bus\x00', 0x803, 0x0) 22:55:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) 22:55:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:53 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xff2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) accept4(r0, &(0x7f0000000080)=@pppol2tp, 0x0, 0x0) 22:55:53 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x6c, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 22:55:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xf0000}, {0x4c}, {0x6}]}) [ 1827.610505][ T27] gspca_zc3xx: reg_w_i err -71 [ 1827.619871][ T27] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 1827.682997][ T27] usb 4-1: USB disconnect, device number 56 [ 1827.731430][T11547] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1827.774533][T11553] IPVS: ftp: loaded support on port[0] = 21 [ 1827.783287][ T28] audit: type=1326 audit(1600210553.208:1303): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:53 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xff2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) accept4(r0, &(0x7f0000000080)=@pppol2tp, 0x0, 0x0) [ 1828.083092][T11579] ima: Unable to reopen file for reading. [ 1828.089774][ T28] audit: type=1800 audit(1600210553.508:1304): pid=11579 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="ramfs" ino=174718 res=0 22:55:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1f}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x1}, 0x8) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 22:55:53 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x4040, 0x0) truncate(&(0x7f0000000080)='./file0/bus\x00', 0x2) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) open(&(0x7f0000000100)='./file0/bus\x00', 0x803, 0x0) [ 1828.404819][T11583] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1828.575513][ T28] audit: type=1326 audit(1600210553.998:1305): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:54 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xff2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) accept4(r0, &(0x7f0000000080)=@pppol2tp, 0x0, 0x0) 22:55:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1828.733838][T11591] ima: Unable to reopen file for reading. [ 1828.749134][ T28] audit: type=1800 audit(1600210554.158:1306): pid=11591 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="ramfs" ino=174745 res=0 22:55:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x100000}, {0x4c}, {0x6}]}) 22:55:54 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x4040, 0x0) truncate(&(0x7f0000000080)='./file0/bus\x00', 0x2) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) open(&(0x7f0000000100)='./file0/bus\x00', 0x803, 0x0) [ 1828.985773][T11596] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1829.134645][ T28] audit: type=1326 audit(1600210554.558:1307): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11597 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1829.381445][T11602] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:54 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) [ 1829.507909][T11604] ima: Unable to reopen file for reading. [ 1829.523142][ T28] audit: type=1800 audit(1600210554.938:1308): pid=11604 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="ramfs" ino=173851 res=0 [ 1829.927515][ T28] audit: type=1326 audit(1600210555.348:1309): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11597 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1830.243335][T11553] IPVS: ftp: loaded support on port[0] = 21 [ 1830.338013][ T7] tipc: TX() has been purged, node left! 22:55:56 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x6c, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 22:55:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1f}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x1}, 0x8) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 22:55:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:56 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x4040, 0x0) truncate(&(0x7f0000000080)='./file0/bus\x00', 0x2) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) open(&(0x7f0000000100)='./file0/bus\x00', 0x803, 0x0) 22:55:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) 22:55:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x100100}, {0x4c}, {0x6}]}) [ 1830.932529][ T28] audit: type=1326 audit(1600210556.348:1310): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11648 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1830.977882][T11662] ima: Unable to reopen file for reading. [ 1830.984801][ T28] audit: type=1800 audit(1600210556.408:1311): pid=11662 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="ramfs" ino=173920 res=0 [ 1831.064418][T11657] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:56 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x13, 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) [ 1831.249164][T11664] IPVS: ftp: loaded support on port[0] = 21 22:55:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) 22:55:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1831.631495][T11692] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1f}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x1}, 0x8) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 22:55:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:57 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x13, 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) [ 1832.146742][T11704] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1833.176698][ T7] tipc: TX() has been purged, node left! 22:55:58 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x6c, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 22:55:58 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) 22:55:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x100200}, {0x4c}, {0x6}]}) 22:55:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:58 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x13, 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 22:55:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1f}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x1}, 0x8) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) [ 1833.418841][T11720] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1833.506979][T11734] IPVS: ftp: loaded support on port[0] = 21 [ 1833.536086][ T28] audit: type=1326 audit(1600210558.958:1312): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11725 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:55:59 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x1a, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x13, 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) [ 1834.106718][T11763] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:55:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) [ 1834.304265][ T28] audit: type=1326 audit(1600210559.728:1313): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11725 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:55:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:00 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 22:56:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x100300}, {0x4c}, {0x6}]}) [ 1834.786140][T11775] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1834.991141][ T28] audit: type=1326 audit(1600210560.408:1314): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11779 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1835.771343][ T28] audit: type=1326 audit(1600210561.188:1315): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11779 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1835.847557][ T7] tipc: TX() has been purged, node left! [ 1835.857146][ T7] tipc: TX() has been purged, node left! 22:56:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x6c, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 22:56:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYRESDEC], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004140)=ANY=[@ANYBLOB='\x00+\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\b'], 0x2b00}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:56:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 22:56:01 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 22:56:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200000}, {0x4c}, {0x6}]}) [ 1836.022467][T11792] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1836.059124][T11795] netlink: 10964 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1836.115165][T11795] netlink: 10964 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1836.178874][ T28] audit: type=1326 audit(1600210561.598:1316): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11797 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) [ 1836.282739][T11800] netlink: 10964 bytes leftover after parsing attributes in process `syz-executor.3'. 22:56:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1836.345337][T11800] netlink: 10964 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1836.366143][T11802] IPVS: ftp: loaded support on port[0] = 21 22:56:01 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) [ 1836.673934][T11827] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 22:56:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 22:56:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1836.985485][ T28] audit: type=1326 audit(1600210562.408:1317): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11797 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1837.235593][T11835] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200100}, {0x4c}, {0x6}]}) 22:56:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 22:56:03 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 22:56:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) [ 1838.385525][ T7] tipc: TX() has been purged, node left! 22:56:03 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x7d, &(0x7f0000000080), 0x8) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 1838.571630][ T28] audit: type=1326 audit(1600210563.988:1318): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11850 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1838.620666][T11853] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:04 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 22:56:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 22:56:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000034000503d25a80648c63940d0324fc600a0002400a000200051a82c137153e670502018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 22:56:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:04 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x7d, &(0x7f0000000080), 0x8) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 1839.140608][T11868] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1839.356276][ T28] audit: type=1326 audit(1600210564.778:1319): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11850 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xaa17, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x2, 0x1, 0x0, "be1979f94a3b050fcfeb703cb633e1c96967d944e10919b8d5b113c80100"}) 22:56:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200200}, {0x4c}, {0x6}]}) 22:56:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 22:56:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000034000503d25a80648c63940d0324fc600a0002400a000200051a82c137153e670502018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 22:56:05 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x7d, &(0x7f0000000080), 0x8) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 1839.828821][T11883] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:05 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x9da, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022130500000007"], 0x0}, 0x0) [ 1839.962164][ T28] audit: type=1326 audit(1600210565.378:1320): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11887 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000034000503d25a80648c63940d0324fc600a0002400a000200051a82c137153e670502018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 22:56:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) dup2(r1, r0) [ 1840.499674][T11906] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:06 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x7d, &(0x7f0000000080), 0x8) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 1840.661893][ T27] usb 4-1: new high-speed USB device number 57 using dummy_hcd 22:56:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:06 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000034000503d25a80648c63940d0324fc600a0002400a000200051a82c137153e670502018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 22:56:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200300}, {0x4c}, {0x6}]}) 22:56:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) dup2(r1, r0) [ 1841.015959][T11919] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1841.072838][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.084076][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.094145][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1841.107186][ T27] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 1841.116436][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:56:06 executing program 5: mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x7fffffff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f000034f000)) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1) [ 1841.378248][ T28] audit: type=1326 audit(1600210566.798:1321): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11925 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1841.475674][ T27] usb 4-1: config 0 descriptor?? 22:56:07 executing program 2: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1841.814993][T11938] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1841.944985][ T27] a4tech 0003:09DA:0006.000D: unknown main item tag 0x0 [ 1841.952278][ T27] a4tech 0003:09DA:0006.000D: item fetching failed at offset 1/5 [ 1841.960678][ T27] a4tech 0003:09DA:0006.000D: parse failed [ 1841.967095][ T27] a4tech: probe of 0003:09DA:0006.000D failed with error -22 [ 1842.150542][ T4012] usb 4-1: USB disconnect, device number 57 [ 1842.176690][ T28] audit: type=1326 audit(1600210567.599:1322): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11925 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1842.941359][ T4012] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1843.341535][ T4012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.352737][ T4012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.362848][ T4012] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1843.376114][ T4012] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 1843.385436][ T4012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.399821][ T4012] usb 4-1: config 0 descriptor?? 22:56:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x9da, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022130500000007"], 0x0}, 0x0) 22:56:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) dup2(r1, r0) 22:56:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') exit(0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x4d2081, 0x0) 22:56:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200400}, {0x4c}, {0x6}]}) 22:56:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:09 executing program 5: mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x7fffffff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f000034f000)) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1) [ 1843.684198][ T4012] usbhid 4-1:0.0: can't add hid device: -71 [ 1843.685917][T11971] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1843.690488][ T4012] usbhid: probe of 4-1:0.0 failed with error -71 [ 1843.719091][ T28] audit: type=1326 audit(1600210569.139:1323): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11967 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1843.832771][ T4012] usb 4-1: USB disconnect, device number 58 22:56:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) dup2(r1, r0) 22:56:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:09 executing program 5: mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x7fffffff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f000034f000)) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1) 22:56:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) [ 1844.362787][T11986] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1844.376335][ T4012] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1844.510328][ T28] audit: type=1326 audit(1600210569.929:1324): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11967 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') exit(0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x4d2081, 0x0) [ 1844.792514][ T4012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.803725][ T4012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.813797][ T4012] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1844.826840][ T4012] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 1844.836334][ T4012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.957176][T11998] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1845.129778][ T4012] usb 4-1: config 0 descriptor?? [ 1845.615153][ T4012] a4tech 0003:09DA:0006.000E: unknown main item tag 0x0 [ 1845.622616][ T4012] a4tech 0003:09DA:0006.000E: item fetching failed at offset 1/5 [ 1845.630796][ T4012] a4tech 0003:09DA:0006.000E: parse failed [ 1845.637366][ T4012] a4tech: probe of 0003:09DA:0006.000E failed with error -22 [ 1845.822112][ T4012] usb 4-1: USB disconnect, device number 59 22:56:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x9da, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022130500000007"], 0x0}, 0x0) 22:56:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 22:56:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200500}, {0x4c}, {0x6}]}) 22:56:11 executing program 5: mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x7fffffff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f000034f000)) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x1) 22:56:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') exit(0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x4d2081, 0x0) [ 1846.435645][ T28] audit: type=1326 audit(1600210571.859:1325): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12018 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1846.495252][T12025] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) [ 1846.821259][T19846] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1846.855212][T12034] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1847.179641][T12038] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1847.182374][T19846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.198992][T19846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.209131][T19846] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1847.223783][T19846] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 1847.233136][T19846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.257794][ T28] audit: type=1326 audit(1600210572.679:1326): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12018 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') exit(0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x4d2081, 0x0) 22:56:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 22:56:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200600}, {0x4c}, {0x6}]}) [ 1847.545001][T19846] usb 4-1: config 0 descriptor?? [ 1847.887915][ T28] audit: type=1326 audit(1600210573.309:1327): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12049 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1847.917549][T12048] not chained 60000 origins [ 1847.922078][T12048] CPU: 0 PID: 12048 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 1847.930745][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.940798][T12048] Call Trace: [ 1847.944097][T12048] dump_stack+0x21c/0x280 [ 1847.948434][T12048] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1847.954509][T12048] kmsan_internal_chain_origin+0x6f/0x130 [ 1847.960240][T12048] ? kmsan_get_metadata+0x116/0x180 [ 1847.965453][T12048] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1847.971347][T12048] ? kmsan_internal_set_origin+0x75/0xb0 [ 1847.976992][T12048] ? kmsan_get_metadata+0x116/0x180 [ 1847.982209][T12048] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1847.988025][T12048] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1847.994207][T12048] ? kmsan_get_metadata+0x116/0x180 [ 1847.999422][T12048] ? kmsan_set_origin_checked+0x95/0xf0 [ 1848.004968][T12048] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1848.011043][T12048] ? _copy_from_user+0x221/0x330 [ 1848.015989][T12048] ? kmsan_get_metadata+0x116/0x180 [ 1848.021205][T12048] __msan_chain_origin+0x50/0x90 [ 1848.026153][T12048] do_recvmmsg+0x118f/0x22c0 [ 1848.030770][T12048] ? ktime_get_ts64+0x79f/0x8d0 [ 1848.035657][T12048] ? __msan_poison_alloca+0xf0/0x120 [ 1848.040946][T12048] ? __se_sys_recvmmsg+0xd3/0x410 [ 1848.046002][T12048] ? __se_sys_recvmmsg+0xd3/0x410 [ 1848.051031][T12048] __se_sys_recvmmsg+0x247/0x410 [ 1848.055976][T12048] ? __prepare_exit_to_usermode+0x16c/0x560 [ 1848.061872][T12048] ? kmsan_get_metadata+0x116/0x180 [ 1848.067099][T12048] __x64_sys_recvmmsg+0x62/0x80 [ 1848.071960][T12048] do_syscall_64+0xad/0x160 [ 1848.076472][T12048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1848.082364][T12048] RIP: 0033:0x45d5f9 [ 1848.086249][T12048] Code: Bad RIP value. [ 1848.090315][T12048] RSP: 002b:00007fac98ddec78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1848.098729][T12048] RAX: ffffffffffffffda RBX: 0000000000026b40 RCX: 000000000045d5f9 [ 1848.106703][T12048] RDX: 0000000000000344 RSI: 0000000020005c80 RDI: 0000000000000003 [ 1848.114671][T12048] RBP: 000000000118cf90 R08: 0000000000000000 R09: 0000000000000000 [ 1848.122635][T12048] R10: 0000000000010122 R11: 0000000000000246 R12: 000000000118cf4c [ 1848.130602][T12048] R13: 000000000169fb6f R14: 00007fac98ddf9c0 R15: 000000000118cf4c [ 1848.138580][T12048] Uninit was stored to memory at: [ 1848.143612][T12048] kmsan_internal_chain_origin+0xad/0x130 [ 1848.149343][T12048] __msan_chain_origin+0x50/0x90 [ 1848.154290][T12048] do_recvmmsg+0x118f/0x22c0 [ 1848.158875][T12048] __se_sys_recvmmsg+0x247/0x410 [ 1848.163819][T12048] __x64_sys_recvmmsg+0x62/0x80 [ 1848.168671][T12048] do_syscall_64+0xad/0x160 [ 1848.173177][T12048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1848.179052][T12048] [ 1848.181374][T12048] Uninit was stored to memory at: [ 1848.186400][T12048] kmsan_internal_chain_origin+0xad/0x130 [ 1848.192120][T12048] __msan_chain_origin+0x50/0x90 [ 1848.197051][T12048] do_recvmmsg+0x118f/0x22c0 [ 1848.201637][T12048] __se_sys_recvmmsg+0x247/0x410 [ 1848.206587][T12048] __x64_sys_recvmmsg+0x62/0x80 [ 1848.211440][T12048] do_syscall_64+0xad/0x160 [ 1848.215940][T12048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1848.221814][T12048] [ 1848.224130][T12048] Uninit was stored to memory at: [ 1848.229152][T12048] kmsan_internal_chain_origin+0xad/0x130 [ 1848.234869][T12048] __msan_chain_origin+0x50/0x90 [ 1848.239813][T12048] do_recvmmsg+0x118f/0x22c0 [ 1848.244398][T12048] __se_sys_recvmmsg+0x247/0x410 [ 1848.249330][T12048] __x64_sys_recvmmsg+0x62/0x80 [ 1848.254179][T12048] do_syscall_64+0xad/0x160 [ 1848.258791][T12048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1848.264669][T12048] [ 1848.266992][T12048] Uninit was stored to memory at: [ 1848.272017][T12048] kmsan_internal_chain_origin+0xad/0x130 [ 1848.277742][T12048] __msan_chain_origin+0x50/0x90 [ 1848.282677][T12048] do_recvmmsg+0x118f/0x22c0 [ 1848.287353][T12048] __se_sys_recvmmsg+0x247/0x410 [ 1848.292293][T12048] __x64_sys_recvmmsg+0x62/0x80 [ 1848.297144][T12048] do_syscall_64+0xad/0x160 [ 1848.301658][T12048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1848.307535][T12048] [ 1848.309904][T12048] Uninit was stored to memory at: [ 1848.314928][T12048] kmsan_internal_chain_origin+0xad/0x130 [ 1848.320644][T12048] __msan_chain_origin+0x50/0x90 [ 1848.325579][T12048] do_recvmmsg+0x118f/0x22c0 [ 1848.330177][T12048] __se_sys_recvmmsg+0x247/0x410 [ 1848.335112][T12048] __x64_sys_recvmmsg+0x62/0x80 [ 1848.339966][T12048] do_syscall_64+0xad/0x160 [ 1848.344468][T12048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1848.350342][T12048] [ 1848.352661][T12048] Uninit was stored to memory at: [ 1848.357690][T12048] kmsan_internal_chain_origin+0xad/0x130 [ 1848.363407][T12048] __msan_chain_origin+0x50/0x90 [ 1848.368343][T12048] do_recvmmsg+0x118f/0x22c0 [ 1848.372940][T12048] __se_sys_recvmmsg+0x247/0x410 [ 1848.377876][T12048] __x64_sys_recvmmsg+0x62/0x80 [ 1848.382740][T12048] do_syscall_64+0xad/0x160 [ 1848.387238][T12048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1848.393115][T12048] [ 1848.395433][T12048] Uninit was stored to memory at: [ 1848.400457][T12048] kmsan_internal_chain_origin+0xad/0x130 [ 1848.406173][T12048] __msan_chain_origin+0x50/0x90 [ 1848.411113][T12048] do_recvmmsg+0x118f/0x22c0 [ 1848.415704][T12048] __se_sys_recvmmsg+0x247/0x410 [ 1848.420639][T12048] __x64_sys_recvmmsg+0x62/0x80 [ 1848.425509][T12048] do_syscall_64+0xad/0x160 [ 1848.430092][T12048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1848.435985][T12048] [ 1848.438308][T12048] Local variable ----msg_sys@do_recvmmsg created at: [ 1848.444976][T12048] do_recvmmsg+0xc2/0x22c0 [ 1848.449388][T12048] do_recvmmsg+0xc2/0x22c0 [ 1848.479205][T19846] a4tech 0003:09DA:0006.000F: unknown main item tag 0x0 [ 1848.486576][T19846] a4tech 0003:09DA:0006.000F: item fetching failed at offset 1/5 [ 1848.497850][T19846] a4tech 0003:09DA:0006.000F: parse failed [ 1848.504080][T19846] a4tech: probe of 0003:09DA:0006.000F failed with error -22 [ 1848.629540][ T28] audit: type=1326 audit(1600210574.049:1328): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12049 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1848.726084][ T4012] usb 4-1: USB disconnect, device number 60 22:56:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x9da, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022130500000007"], 0x0}, 0x0) 22:56:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:14 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 22:56:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 22:56:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200700}, {0x4c}, {0x6}]}) 22:56:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af25, 0x0) [ 1849.392607][ T28] audit: type=1326 audit(1600210574.819:1329): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12072 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:15 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af25, 0x0) 22:56:15 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004042, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x1e, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x5, &(0x7f0000000000), 0x20a154cc) 22:56:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1849.631888][T11149] usb 4-1: new high-speed USB device number 61 using dummy_hcd 22:56:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) [ 1849.911679][T12091] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:15 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af25, 0x0) [ 1850.002645][T11149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.013926][T11149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.024126][T11149] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1850.037153][T11149] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 1850.046438][T11149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.071491][T11149] usb 4-1: config 0 descriptor?? 22:56:15 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004042, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x1e, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x5, &(0x7f0000000000), 0x20a154cc) [ 1850.157983][ T28] audit: type=1326 audit(1600210575.579:1330): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12072 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1850.556689][T11149] a4tech 0003:09DA:0006.0010: unknown main item tag 0x0 [ 1850.564070][T11149] a4tech 0003:09DA:0006.0010: item fetching failed at offset 1/5 [ 1850.574560][T11149] a4tech 0003:09DA:0006.0010: parse failed [ 1850.580916][T11149] a4tech: probe of 0003:09DA:0006.0010 failed with error -22 [ 1850.775692][T19846] usb 4-1: USB disconnect, device number 61 22:56:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200800}, {0x4c}, {0x6}]}) 22:56:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7fb}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 22:56:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af25, 0x0) 22:56:16 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004042, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x1e, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x5, &(0x7f0000000000), 0x20a154cc) [ 1851.431342][T12122] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1851.462891][ T28] audit: type=1326 audit(1600210576.889:1331): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12119 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:17 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004042, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x1e, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x5, &(0x7f0000000000), 0x20a154cc) 22:56:17 executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x1) 22:56:17 executing program 4: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="22d706657ab5c66a8b59adea4a8ca9d964246eb9a0e865d0b7eab8cea13a9f03a3a66a", 0x23) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) rt_sigtimedwait(&(0x7f0000000180), 0x0, &(0x7f00000002c0), 0x8) [ 1851.837826][T12131] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400300000000000000000000000140002"], 0x50}}, 0x0) 22:56:17 executing program 3: unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 22:56:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1852.238458][ T28] audit: type=1326 audit(1600210577.659:1332): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12119 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1852.349689][T12145] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200900}, {0x4c}, {0x6}]}) 22:56:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c7", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x4) 22:56:17 executing program 4: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="22d706657ab5c66a8b59adea4a8ca9d964246eb9a0e865d0b7eab8cea13a9f03a3a66a", 0x23) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) rt_sigtimedwait(&(0x7f0000000180), 0x0, &(0x7f00000002c0), 0x8) 22:56:17 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') fchmod(r0, 0x0) 22:56:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:18 executing program 3: unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 22:56:18 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') fchmod(r0, 0x0) [ 1852.914625][T12165] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1852.924547][ T28] audit: type=1326 audit(1600210578.349:1333): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:18 executing program 4: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="22d706657ab5c66a8b59adea4a8ca9d964246eb9a0e865d0b7eab8cea13a9f03a3a66a", 0x23) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) rt_sigtimedwait(&(0x7f0000000180), 0x0, &(0x7f00000002c0), 0x8) 22:56:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:18 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') fchmod(r0, 0x0) [ 1853.408477][T12178] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:18 executing program 4: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="22d706657ab5c66a8b59adea4a8ca9d964246eb9a0e865d0b7eab8cea13a9f03a3a66a", 0x23) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) rt_sigtimedwait(&(0x7f0000000180), 0x0, &(0x7f00000002c0), 0x8) 22:56:19 executing program 3: unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1853.685790][ T28] audit: type=1326 audit(1600210579.109:1334): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200a00}, {0x4c}, {0x6}]}) [ 1854.190806][ T28] audit: type=1326 audit(1600210579.609:1335): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12192 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1854.962268][ T28] audit: type=1326 audit(1600210580.389:1336): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12192 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c7", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x4) 22:56:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:21 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') fchmod(r0, 0x0) 22:56:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') 22:56:21 executing program 3: unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r2, r3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 22:56:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200b00}, {0x4c}, {0x6}]}) [ 1855.710792][ T28] audit: type=1326 audit(1600210581.129:1337): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12202 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1855.732786][T12211] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x10000000, 0x24}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x7}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 22:56:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xb000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/26) 22:56:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcd, &(0x7f0000000000), 0x3c) [ 1856.258942][T12222] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1856.485619][ T28] audit: type=1326 audit(1600210581.899:1338): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12202 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x10000000, 0x24}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x7}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 22:56:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xb010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1856.844356][T12236] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c7", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x4) 22:56:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 22:56:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200c00}, {0x4c}, {0x6}]}) 22:56:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/26) 22:56:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x10000000, 0x24}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x7}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 22:56:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xb020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1858.991852][T12249] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1859.003840][ T28] audit: type=1326 audit(1600210584.430:1339): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12243 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 22:56:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xb030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/26) 22:56:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x10000000, 0x24}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x7}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 22:56:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcd, &(0x7f0000000000), 0x3c) [ 1859.442944][T12261] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/26) [ 1859.780931][ T28] audit: type=1326 audit(1600210585.200:1340): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12243 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c7", 0x58}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x4) 22:56:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xc000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 22:56:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x38}}, 0x0) 22:56:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200d00}, {0x4c}, {0x6}]}) 22:56:27 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x1b) sendmmsg$alg(r1, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)='W', 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100), 0x8) [ 1862.312612][ T28] audit: type=1326 audit(1600210587.740:1341): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12276 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1862.322567][T12283] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x38}}, 0x0) 22:56:27 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x1b) sendmmsg$alg(r1, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)='W', 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100), 0x8) 22:56:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 22:56:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xc010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1862.815728][T12298] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 22:56:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x38}}, 0x0) [ 1863.098585][ T28] audit: type=1326 audit(1600210588.520:1342): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12276 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xc020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:30 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x1b) sendmmsg$alg(r1, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)='W', 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100), 0x8) 22:56:30 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '&&//em0ppp1vboxnet0-user\x00'}, 0x25) 22:56:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x38}}, 0x0) 22:56:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200e00}, {0x4c}, {0x6}]}) 22:56:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x9, 0x400}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x21, 0x80ffff, 0x11, r2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r9 = socket(0x10, 0x2, 0x0) io_submit(r8, 0x2, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x5, 0x0, r9, 0x0, 0x0, 0x2}]) write$6lowpan_enable(r7, &(0x7f0000000300)='0', 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1865.484539][ T28] audit: type=1326 audit(1600210590.910:1343): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12309 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1865.536111][T12318] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1865.566770][ T28] audit: type=1400 audit(1600210590.990:1344): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="&&//em0ppp1vboxnet0-user" pid=12316 comm="syz-executor.5" 22:56:31 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x1b) sendmmsg$alg(r1, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)='W', 0x1}], 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100), 0x8) 22:56:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000002060506000000000000000000000000050004000000000005000100060004000d000300686173683a6e6574000000000900020073797a3000000000050005000a"], 0x48}}, 0x0) 22:56:31 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '&&//em0ppp1vboxnet0-user\x00'}, 0x25) 22:56:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xc030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1866.085733][T12330] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x2f) 22:56:31 executing program 4: [ 1866.117973][ T28] audit: type=1400 audit(1600210591.540:1345): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="&&//em0ppp1vboxnet0-user" pid=12328 comm="syz-executor.5" sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1, 0x9000, 0x0) 22:56:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x9, 0x400}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x21, 0x80ffff, 0x11, r2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r9 = socket(0x10, 0x2, 0x0) io_submit(r8, 0x2, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x5, 0x0, r9, 0x0, 0x0, 0x2}]) write$6lowpan_enable(r7, &(0x7f0000000300)='0', 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1866.296404][ T28] audit: type=1326 audit(1600210591.720:1346): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12309 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:31 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '&&//em0ppp1vboxnet0-user\x00'}, 0x25) 22:56:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x300000}, {0x4c}, {0x6}]}) [ 1866.669841][ T28] audit: type=1400 audit(1600210592.090:1347): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="&&//em0ppp1vboxnet0-user" pid=12343 comm="syz-executor.5" 22:56:32 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1, 0x9000, 0x0) 22:56:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x2f) [ 1866.804734][T12349] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1866.830886][ T28] audit: type=1326 audit(1600210592.250:1348): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12347 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:32 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '&&//em0ppp1vboxnet0-user\x00'}, 0x25) 22:56:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:32 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1, 0x9000, 0x0) 22:56:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x9, 0x400}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x21, 0x80ffff, 0x11, r2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r9 = socket(0x10, 0x2, 0x0) io_submit(r8, 0x2, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x5, 0x0, r9, 0x0, 0x0, 0x2}]) write$6lowpan_enable(r7, &(0x7f0000000300)='0', 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1867.278611][ T28] audit: type=1400 audit(1600210592.700:1349): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="&&//em0ppp1vboxnet0-user" pid=12360 comm="syz-executor.5" 22:56:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x2f) [ 1867.379101][T12365] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x9, 0x400}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x21, 0x80ffff, 0x11, r2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r9 = socket(0x10, 0x2, 0x0) io_submit(r8, 0x2, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x5, 0x0, r9, 0x0, 0x0, 0x2}]) write$6lowpan_enable(r7, &(0x7f0000000300)='0', 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1867.598984][ T28] audit: type=1326 audit(1600210593.020:1350): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12347 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:33 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1, 0x9000, 0x0) 22:56:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x300100}, {0x4c}, {0x6}]}) 22:56:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x2f) 22:56:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x9, 0x400}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x21, 0x80ffff, 0x11, r2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r9 = socket(0x10, 0x2, 0x0) io_submit(r8, 0x2, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x5, 0x0, r9, 0x0, 0x0, 0x2}]) write$6lowpan_enable(r7, &(0x7f0000000300)='0', 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1868.030794][T12383] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1868.173186][ T28] audit: type=1326 audit(1600210593.600:1351): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12385 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x9, 0x400}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x21, 0x80ffff, 0x11, r2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r9 = socket(0x10, 0x2, 0x0) io_submit(r8, 0x2, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x5, 0x0, r9, 0x0, 0x0, 0x2}]) write$6lowpan_enable(r7, &(0x7f0000000300)='0', 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:56:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1868.569383][T12397] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1868.920465][T12402] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x9, 0x400}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x21, 0x80ffff, 0x11, r2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) r9 = socket(0x10, 0x2, 0x0) io_submit(r8, 0x2, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x5, 0x0, r9, 0x0, 0x0, 0x2}]) write$6lowpan_enable(r7, &(0x7f0000000300)='0', 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:56:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 1868.958283][ T28] audit: type=1326 audit(1600210594.380:1352): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12385 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:34 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8906, 0x0) 22:56:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x300200}, {0x4c}, {0x6}]}) 22:56:34 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000001, 0x13, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000019580)=0xfffffffffffffc93) 22:56:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:34 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) accept(r0, 0x0, 0x0) 22:56:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x18, r1, 0x703, 0x0, 0x0, {0xf}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [ 1869.525069][ T28] audit: type=1326 audit(1600210594.950:1353): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12414 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1869.611240][T12419] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:35 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000000000401) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 22:56:35 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000001, 0x13, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000019580)=0xfffffffffffffc93) 22:56:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:35 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3, &(0x7f0000000000), 0x20836000) 22:56:35 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000000000401) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 1870.145005][T12433] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x18, r1, 0x703, 0x0, 0x0, {0xf}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 22:56:35 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000001, 0x13, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000019580)=0xfffffffffffffc93) [ 1870.315423][ T28] audit: type=1326 audit(1600210595.740:1354): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12414 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x300300}, {0x4c}, {0x6}]}) 22:56:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:36 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3, &(0x7f0000000000), 0x20836000) 22:56:36 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000000000401) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 22:56:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x18, r1, 0x703, 0x0, 0x0, {0xf}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [ 1870.720250][T12445] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1870.833455][ T28] audit: type=1326 audit(1600210596.260:1355): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12446 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:36 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000001, 0x13, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000019580)=0xfffffffffffffc93) 22:56:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:36 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3, &(0x7f0000000000), 0x20836000) 22:56:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x18, r1, 0x703, 0x0, 0x0, {0xf}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 22:56:36 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000000000401) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 1871.283194][T12459] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') 22:56:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1871.643758][ T28] audit: type=1326 audit(1600210597.070:1356): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12446 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1871.800745][T12469] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400000}, {0x4c}, {0x6}]}) 22:56:37 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3, &(0x7f0000000000), 0x20836000) 22:56:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname(r1, &(0x7f0000016d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}, @mcast1}}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x27dd2a658923aaf5, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 22:56:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x195, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) 22:56:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:37 executing program 2: unshare(0x400) r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xa0002007}) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xa9aaaa0a, 0x0, 0x0) [ 1872.199013][ T28] audit: type=1326 audit(1600210597.620:1357): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1872.259909][T12487] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:56:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000003c0)=0xfffffffe, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x7fc8) 22:56:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x195, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) 22:56:37 executing program 2: unshare(0x400) r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xa0002007}) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xa9aaaa0a, 0x0, 0x0) 22:56:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1872.653018][T12491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1872.758426][T12491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:56:38 executing program 2: unshare(0x400) r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xa0002007}) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xa9aaaa0a, 0x0, 0x0) [ 1872.803656][T12491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1872.996597][ T28] audit: type=1326 audit(1600210598.420:1358): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400100}, {0x4c}, {0x6}]}) 22:56:38 executing program 2: unshare(0x400) r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xa0002007}) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xa9aaaa0a, 0x0, 0x0) [ 1873.573927][ T28] audit: type=1326 audit(1600210599.000:1359): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12516 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0xffff) [ 1873.634128][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1873.778806][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1873.815486][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1874.160165][T12504] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x195, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) [ 1874.348220][T12509] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1874.364534][ T28] audit: type=1326 audit(1600210599.791:1360): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12516 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1874.457520][T12509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1874.497769][T12509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:56:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400200}, {0x4c}, {0x6}]}) [ 1874.708028][ T28] audit: type=1326 audit(1600210600.131:1361): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12528 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1875.246312][T12512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1875.297649][T12512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1875.317903][T12512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1875.485597][ T28] audit: type=1326 audit(1600210600.911:1362): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12528 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1875.842421][T12532] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:56:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400300}, {0x4c}, {0x6}]}) 22:56:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0xffff) 22:56:41 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x195, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) 22:56:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000010000000100000006"], 0x18}, 0x0) [ 1876.147593][ T28] audit: type=1326 audit(1600210601.571:1363): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12540 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1876.302074][T12539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1876.347168][T12539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1876.365960][T12539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:56:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0xffff) [ 1876.886358][T12548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1876.938917][ T28] audit: type=1326 audit(1600210602.361:1364): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12540 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1877.032489][T12548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1877.044408][T12548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:56:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400400}, {0x4c}, {0x6}]}) [ 1877.251578][ T28] audit: type=1326 audit(1600210602.681:1365): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12565 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1877.397275][T12551] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:56:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0xffff) 22:56:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000700), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:56:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 1877.988762][T12572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:56:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x44}, {0x6, 0x0, 0x0, 0x7ffffff3}]}) timerfd_create(0x0, 0x0) [ 1878.042443][T12572] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1878.076582][ T28] audit: type=1326 audit(1600210603.501:1366): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12565 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400500}, {0x4c}, {0x6}]}) [ 1878.218702][T12572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:56:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000700), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1878.275534][T12572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1878.438390][ T28] audit: type=1326 audit(1600210603.861:1367): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12591 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x44}, {0x6, 0x0, 0x0, 0x7ffffff3}]}) timerfd_create(0x0, 0x0) 22:56:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000700), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:56:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x44}, {0x6, 0x0, 0x0, 0x7ffffff3}]}) timerfd_create(0x0, 0x0) [ 1879.231049][ T28] audit: type=1326 audit(1600210604.661:1368): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12591 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1879.257915][T12574] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000700), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1879.456433][T12580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1879.488618][T12580] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1879.592154][T12580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1879.649904][T12580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:56:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:56:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400600}, {0x4c}, {0x6}]}) 22:56:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x44}, {0x6, 0x0, 0x0, 0x7ffffff3}]}) timerfd_create(0x0, 0x0) [ 1880.187880][T12583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1880.295253][T12583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1880.325802][T12583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1880.345077][ T28] audit: type=1326 audit(1600210605.771:1369): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12624 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1880.787002][T12587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1880.820597][T12587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1880.835175][T12587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:56:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:56:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4018aebd, 0x401000) 22:56:46 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 1881.122303][T12625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1881.137314][ T28] audit: type=1326 audit(1600210606.561:1370): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12624 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1881.175841][T12625] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 22:56:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400700}, {0x4c}, {0x6}]}) [ 1881.321101][T12625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1881.354791][T12625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:56:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4018aebd, 0x401000) [ 1881.563319][ T28] audit: type=1326 audit(1600210606.991:1371): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12652 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1881.855051][T12626] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4018aebd, 0x401000) [ 1882.061416][T12631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:56:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10990100, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1882.113669][T12631] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1882.235006][T12631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1882.281313][T12631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1882.357358][ T28] audit: type=1326 audit(1600210607.781:1372): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12652 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4018aebd, 0x401000) [ 1883.005743][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:56:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:56:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400800}, {0x4c}, {0x6}]}) 22:56:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x11000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:48 executing program 5: r0 = syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x2a, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1883.139567][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1883.183982][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1883.238496][ T28] audit: type=1326 audit(1600210608.661:1373): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12683 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1883.800081][T12655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1883.843839][T12655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1883.880697][T12655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1884.005223][ T28] audit: type=1326 audit(1600210609.431:1374): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12683 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1884.330084][T12685] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1884.423467][T12690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1884.445620][T12690] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 22:56:50 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e21, 0x1, @private2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @dev}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:56:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 22:56:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400900}, {0x4c}, {0x6}]}) 22:56:50 executing program 5: symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0\x00') lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 22:56:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x11010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1884.517597][T12690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1884.526248][T12690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1884.718420][ T28] audit: type=1326 audit(1600210610.141:1375): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12701 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:50 executing program 5: symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0\x00') lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 22:56:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x98, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 22:56:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x98, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) [ 1885.332847][T12721] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1885.495657][ T28] audit: type=1326 audit(1600210610.921:1376): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12701 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1885.546325][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1885.557952][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1885.607694][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1885.625846][T12729] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1885.646139][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1886.038651][T12703] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x98, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 22:56:51 executing program 5: symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0\x00') lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 22:56:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400a00}, {0x4c}, {0x6}]}) 22:56:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x11020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01000000000000000000000000000500000001000000000094332d6e00000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x49, 0x0, 0x0) 22:56:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x74c000) [ 1886.231539][T12734] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1886.295710][ T28] audit: type=1326 audit(1600210611.721:1377): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12737 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1886.373888][T12740] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks 22:56:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0x0, 0x98, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 22:56:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x11030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:51 executing program 5: symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0\x00') lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 22:56:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x74c000) [ 1886.673780][T12750] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1886.698304][T12752] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01000000000000000000000000000500000001000000000094332d6e00000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x49, 0x0, 0x0) 22:56:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast}, 0xa}}, 0xe8) 22:56:52 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0xd, &(0x7f0000000000), 0x20a154cc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x19404, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80440, 0x0) getpeername$inet(r4, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000240)) 22:56:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x12000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1887.121818][ T28] audit: type=1326 audit(1600210612.551:1378): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12737 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1887.257784][T12766] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400b00}, {0x4c}, {0x6}]}) 22:56:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast}, 0xa}}, 0xe8) 22:56:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x74c000) 22:56:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01000000000000000000000000000500000001000000000094332d6e00000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x49, 0x0, 0x0) 22:56:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x12010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1887.803809][ T28] audit: type=1326 audit(1600210613.231:1379): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12772 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1887.961902][T12780] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff01000000000000000000000000000500000001000000000094332d6e00000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x49, 0x0, 0x0) 22:56:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast}, 0xa}}, 0xe8) 22:56:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x12020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:53 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0xd, &(0x7f0000000000), 0x20a154cc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x19404, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80440, 0x0) getpeername$inet(r4, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000240)) [ 1888.465684][ T28] audit: type=1326 audit(1600210613.891:1380): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12772 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x74c000) 22:56:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400c00}, {0x4c}, {0x6}]}) [ 1888.671804][T12791] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:54 executing program 4: r0 = socket(0x15, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @broadcast}}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 22:56:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast}, 0xa}}, 0xe8) [ 1889.136749][ T28] audit: type=1326 audit(1600210614.561:1381): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12797 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:54 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 22:56:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x12030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:55 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000013000)=0xfd0e) close(r0) [ 1889.785868][T12809] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:55 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={0x0}}, 0x0) [ 1889.913411][ T28] audit: type=1326 audit(1600210615.341:1382): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12797 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:55 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0xd, &(0x7f0000000000), 0x20a154cc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x19404, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80440, 0x0) getpeername$inet(r4, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000240)) 22:56:55 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 22:56:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400d00}, {0x4c}, {0x6}]}) 22:56:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x13000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1890.407777][T12824] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:55 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000013000)=0xfd0e) close(r0) [ 1890.604424][ T28] audit: type=1326 audit(1600210616.032:1383): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12826 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:56 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 22:56:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x13010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:56 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={0x0}}, 0x0) [ 1891.212396][T12837] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:56 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0xd, &(0x7f0000000000), 0x20a154cc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x19404, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80440, 0x0) getpeername$inet(r4, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000240)) 22:56:56 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 1891.378579][ T28] audit: type=1326 audit(1600210616.802:1384): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12826 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:56 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000013000)=0xfd0e) close(r0) 22:56:56 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={0x0}}, 0x0) 22:56:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x13020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x400e00}, {0x4c}, {0x6}]}) [ 1891.758841][T12849] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2e, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}, @TCA_CHAIN]}, 0x5c}}, 0x0) [ 1892.139191][T12849] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1892.166160][ T28] audit: type=1326 audit(1600210617.592:1385): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12852 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:57 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000013000)=0xfd0e) close(r0) 22:56:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={0x0}}, 0x0) [ 1892.374262][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:56:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x13030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1892.563022][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:56:58 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "400100", 0x28, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xe]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1}}}}}}, 0x0) [ 1892.867855][T12872] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:58 executing program 2: unshare(0x8000400) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:56:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2e, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}, @TCA_CHAIN]}, 0x5c}}, 0x0) 22:56:58 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [{0x2, 0x4}, {}, {0x2, 0x4}, {0x2, 0x4}, {}], {0x4, 0x5}, [{0x8, 0x3}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x1}], {}, {0x20, 0x2}}, 0x6c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='-0', 0x20000042}], 0x1) [ 1892.990070][ T28] audit: type=1326 audit(1600210618.422:1386): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12852 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x500000}, {0x4c}, {0x6}]}) 22:56:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x14000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:58 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "400100", 0x28, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xe]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1}}}}}}, 0x0) [ 1893.226094][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1893.454836][T12891] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="24000000210007041dfffd946f610500020000e8fe0208010001080008001800fe7f0000", 0x24}], 0x1}, 0x0) [ 1893.553774][ T28] audit: type=1326 audit(1600210618.982:1387): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12892 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:59 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [{0x2, 0x4}, {}, {0x2, 0x4}, {0x2, 0x4}, {}], {0x4, 0x5}, [{0x8, 0x3}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x1}], {}, {0x20, 0x2}}, 0x6c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='-0', 0x20000042}], 0x1) 22:56:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2e, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}, @TCA_CHAIN]}, 0x5c}}, 0x0) 22:56:59 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "400100", 0x28, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xe]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1}}}}}}, 0x0) 22:56:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x14010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1893.908628][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1894.017814][T12910] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:56:59 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x103501, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@target={'target ', {'PCI:', 'a', ':', '5', ':', '7', '.', '16'}}, 0x14) 22:56:59 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [{0x2, 0x4}, {}, {0x2, 0x4}, {0x2, 0x4}, {}], {0x4, 0x5}, [{0x8, 0x3}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x1}], {}, {0x20, 0x2}}, 0x6c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='-0', 0x20000042}], 0x1) 22:56:59 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "400100", 0x28, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xe]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1}}}}}}, 0x0) 22:56:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2e, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}, @TCA_CHAIN]}, 0x5c}}, 0x0) [ 1894.352636][ T28] audit: type=1326 audit(1600210619.782:1388): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12892 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:56:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x500100}, {0x4c}, {0x6}]}) 22:56:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x14020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:56:59 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x103501, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@target={'target ', {'PCI:', 'a', ':', '5', ':', '7', '.', '16'}}, 0x14) [ 1894.558787][T12919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1894.679647][T12928] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:00 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [{0x2, 0x4}, {}, {0x2, 0x4}, {0x2, 0x4}, {}], {0x4, 0x5}, [{0x8, 0x3}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x1}], {}, {0x20, 0x2}}, 0x6c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='-0', 0x20000042}], 0x1) [ 1894.806865][ T28] audit: type=1326 audit(1600210620.232:1389): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12930 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x101) setsockopt$inet_msfilter(r0, 0x0, 0xa, &(0x7f0000000180)={@multicast2, @dev}, 0x10) 22:57:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x14030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:00 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x103501, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@target={'target ', {'PCI:', 'a', ':', '5', ':', '7', '.', '16'}}, 0x14) 22:57:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700020000000000000000ed00", @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400210100000000020000000a3f0000", @ANYRES32=r4, @ANYBLOB="1400020002"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty, r4}, 0x14) [ 1895.285341][T12942] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:00 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) pipe(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x214100, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) 22:57:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x101) setsockopt$inet_msfilter(r0, 0x0, 0xa, &(0x7f0000000180)={@multicast2, @dev}, 0x10) 22:57:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x15000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:01 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x103501, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@target={'target ', {'PCI:', 'a', ':', '5', ':', '7', '.', '16'}}, 0x14) [ 1895.614176][ T28] audit: type=1326 audit(1600210621.042:1390): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12930 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1895.708736][ C1] sd 0:0:1:0: [sg0] tag#2814 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1895.719402][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB: Test Unit Ready [ 1895.726053][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.735950][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.745757][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.755619][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.765432][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.775264][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.785093][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.794885][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.804713][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.814541][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.824404][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.834231][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1895.844044][ C1] sd 0:0:1:0: [sg0] tag#2814 CDB[c0]: 00 00 00 00 00 00 00 00 22:57:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x500200}, {0x4c}, {0x6}]}) 22:57:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700020000000000000000ed00", @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400210100000000020000000a3f0000", @ANYRES32=r4, @ANYBLOB="1400020002"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty, r4}, 0x14) [ 1895.975530][T12957] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x101) setsockopt$inet_msfilter(r0, 0x0, 0xa, &(0x7f0000000180)={@multicast2, @dev}, 0x10) 22:57:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x15010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1896.320965][ T28] audit: type=1326 audit(1600210621.752:1391): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12964 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700020000000000000000ed00", @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400210100000000020000000a3f0000", @ANYRES32=r4, @ANYBLOB="1400020002"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty, r4}, 0x14) [ 1896.468293][T12969] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018", 0x5}], 0x1}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) 22:57:02 executing program 5: r0 = socket$inet(0x2, 0x3, 0x101) setsockopt$inet_msfilter(r0, 0x0, 0xa, &(0x7f0000000180)={@multicast2, @dev}, 0x10) 22:57:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x15020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1897.063917][ T28] audit: type=1326 audit(1600210622.492:1392): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12964 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1897.163197][T12984] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:02 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff7c3b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee0d20f4c92fad7e34bd5522d45cc36c2542eac2d224609aba9e6000000000000000000000000000000f390d71cc6093c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce01000000cff8ca2996e518e3e69051f6d24317f8e3d037359f1886a4342b9f9d843a8d25f196abd8005bb6ec1a5b8e3141d9c2a5c74633a687a135308e49ce118c81517a05000000ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4e52727007a6e3cdf09bc1a8e2f803a5ca2ac418f93bdad5021bf4bbacea2d9bd88e83a97af9c53d06c40a6cec7e46e6b6738a630634a653b7221a5901b50e56a20d6a3f1f35815c34ddd06bd"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) pipe(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x214100, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) 22:57:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700020000000000000000ed00", @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400210100000000020000000a3f0000", @ANYRES32=r4, @ANYBLOB="1400020002"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty, r4}, 0x14) 22:57:02 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x10000001}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:57:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x500300}, {0x4c}, {0x6}]}) 22:57:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018", 0x5}], 0x1}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) 22:57:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x15030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1897.653615][T12994] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1897.665386][ T28] audit: type=1326 audit(1600210623.092:1393): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12990 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018", 0x5}], 0x1}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) 22:57:03 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x10000001}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:57:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x16000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:03 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:57:03 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x10000001}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 1898.285223][T13009] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1898.367627][ C0] sd 0:0:1:0: [sg0] tag#2815 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1898.378468][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB: Test Unit Ready [ 1898.385146][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.395207][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.405130][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.415015][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.425104][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.434994][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.444907][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.454732][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:57:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018", 0x5}], 0x1}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080)) [ 1898.464581][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.474381][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.484289][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.494182][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1898.504103][ C0] sd 0:0:1:0: [sg0] tag#2815 CDB[c0]: 00 00 00 00 00 00 00 00 22:57:05 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) pipe(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x214100, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) 22:57:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x16010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600000}, {0x4c}, {0x6}]}) 22:57:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x10000001}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:57:05 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r4, 0x0) statfs(&(0x7f00000000c0)='./bus\x00', &(0x7f0000003300)=""/4114) 22:57:05 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1899.727107][T13027] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1899.814926][ T28] audit: type=1326 audit(1600210625.242:1394): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13028 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:05 executing program 5: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000091b000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='pagemap\x00') r1 = socket$inet(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x103f00, 0x8001) 22:57:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x16020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:05 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r4, 0x0) statfs(&(0x7f00000000c0)='./bus\x00', &(0x7f0000003300)=""/4114) [ 1900.334946][T13040] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1900.460248][ C0] sd 0:0:1:0: [sg0] tag#2752 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1900.471135][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB: Test Unit Ready [ 1900.478027][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.487909][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.497803][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:57:05 executing program 5: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000091b000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='pagemap\x00') r1 = socket$inet(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x103f00, 0x8001) [ 1900.507754][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.517704][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.527518][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.537462][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.547412][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.557373][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.567418][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.577329][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.587229][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1900.597152][ C0] sd 0:0:1:0: [sg0] tag#2752 CDB[c0]: 00 00 00 00 00 00 00 00 22:57:06 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r4, 0x0) statfs(&(0x7f00000000c0)='./bus\x00', &(0x7f0000003300)=""/4114) 22:57:06 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:57:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) pipe(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x214100, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) 22:57:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600100}, {0x4c}, {0x6}]}) 22:57:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x16030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:07 executing program 5: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000091b000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='pagemap\x00') r1 = socket$inet(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x103f00, 0x8001) 22:57:07 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r4, 0x0) statfs(&(0x7f00000000c0)='./bus\x00', &(0x7f0000003300)=""/4114) [ 1901.676884][T13060] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1901.746578][ T28] audit: type=1326 audit(1600210627.172:1395): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13058 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x17000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:07 executing program 5: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000091b000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='pagemap\x00') r1 = socket$inet(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x103f00, 0x8001) 22:57:07 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1902.235601][T13068] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1902.375880][ C0] sd 0:0:1:0: [sg0] tag#2753 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1902.386694][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB: Test Unit Ready [ 1902.393461][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.403414][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.413331][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.423217][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.433104][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.443029][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.452927][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.462849][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.472751][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.482594][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.492476][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.502461][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1902.512316][ C0] sd 0:0:1:0: [sg0] tag#2753 CDB[c0]: 00 00 00 00 00 00 00 00 22:57:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x17010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0xe3b, 0x3, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x401}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5b0}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x1d4}]}}}]}, 0x64}}, 0x0) 22:57:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1902.874484][T13082] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1902.912959][T13083] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1903.040174][T13085] bond10: (slave gretap1): making interface the new active one [ 1903.053122][T13085] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 1903.404934][T13083] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:57:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x17020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600200}, {0x4c}, {0x6}]}) 22:57:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0xe3b, 0x3, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x401}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5b0}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x1d4}]}}}]}, 0x64}}, 0x0) 22:57:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1904.042137][T13162] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1904.156144][T13169] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1904.177099][ T28] audit: type=1326 audit(1600210629.602:1396): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x17030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0xe3b, 0x3, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x401}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5b0}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x1d4}]}}}]}, 0x64}}, 0x0) [ 1904.749285][T13212] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1904.910418][ T28] audit: type=1326 audit(1600210630.342:1397): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1905.056094][T13219] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 22:57:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600300}, {0x4c}, {0x6}]}) 22:57:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1905.403290][T13259] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1905.423633][ T28] audit: type=1326 audit(1600210630.852:1398): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13255 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0xe3b, 0x3, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x401}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5b0}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x1d4}]}}}]}, 0x64}}, 0x0) 22:57:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x18010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7008c743d3bba54}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0xfffffffffffffe7e, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f126408}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 22:57:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:11 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 1905.953958][T13268] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1906.029505][T13269] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1906.234043][ T28] audit: type=1326 audit(1600210631.662:1399): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13255 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, 0x0) 22:57:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x18020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) add_key(0x0, 0x0, &(0x7f0000000500)="87a2f946b4abfbdbe9", 0x9, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @ipv4={[], [], @loopback}, 0xafdff97a}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x242002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r4, 0x50c, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008080) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x80000001, 0x80000001, 0x20, 0x1, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1f}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008044}, 0x8855) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2400000032001f0014f9f407112c04091c0007ed100001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 22:57:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600400}, {0x4c}, {0x6}]}) 22:57:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x2c) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x0, "350aa25fab9cff4a"}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x37cb1133) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 22:57:12 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 1906.653966][T13318] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1906.774582][ T28] audit: type=1326 audit(1600210632.203:1400): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000000000145aaa5e18e771", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 22:57:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x18030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:12 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r3}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 22:57:12 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 1907.154139][T13331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1907.195834][T13334] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x19000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:13 executing program 2: setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) [ 1907.568811][ T28] audit: type=1326 audit(1600210633.003:1401): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:13 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 22:57:13 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r3}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 22:57:13 executing program 5: r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) read(r0, 0x0, 0x0) [ 1907.746520][T13348] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600500}, {0x4c}, {0x6}]}) 22:57:13 executing program 2: setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) 22:57:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x19010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:13 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r3}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 22:57:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x37, {0x37, 0x0, "0024720000da5bd254935fe7f80bf4c758ebb08151d92c001e0e389b21cb30571f06a42856529d199af8a3d39aa1c25f78fa5fa8da"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1908.127288][ T28] audit: type=1326 audit(1600210633.553:1402): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:13 executing program 5: r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) read(r0, 0x0, 0x0) 22:57:13 executing program 2: setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) [ 1908.384176][T13366] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x19020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1908.627405][T11149] usb 5-1: new high-speed USB device number 93 using dummy_hcd 22:57:14 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r3}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 22:57:14 executing program 5: r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) read(r0, 0x0, 0x0) 22:57:14 executing program 2: setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) [ 1908.902697][ T28] audit: type=1326 audit(1600210634.333:1403): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1908.940101][T13377] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1908.988676][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1908.999964][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1909.010372][T11149] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1909.019734][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:57:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600600}, {0x4c}, {0x6}]}) [ 1909.158018][T11149] usb 5-1: config 0 descriptor?? 22:57:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x19030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:14 executing program 5: r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) read(r0, 0x0, 0x0) 22:57:14 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3860, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}, "020088beffff0064"}}}}}, 0x0) [ 1909.366566][ T28] audit: type=1326 audit(1600210634.793:1404): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13387 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:14 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x30, &(0x7f0000000000), 0x20a154cc) [ 1909.487625][T11149] usbhid 5-1:0.0: can't add hid device: -71 [ 1909.494164][T11149] usbhid: probe of 5-1:0.0 failed with error -71 [ 1909.516543][T13391] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1909.556283][T11149] usb 5-1: USB disconnect, device number 93 [ 1909.997515][T11149] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1910.145840][ T28] audit: type=1326 audit(1600210635.573:1405): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13387 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1910.357401][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.368599][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1910.378743][T11149] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1910.388136][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.399223][T11149] usb 5-1: config 0 descriptor?? [ 1910.882969][T11149] wacom 0003:056A:00B2.0011: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 1910.894695][T11149] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B2.0011/input/input52 [ 1911.011972][T11149] wacom 0003:056A:00B2.0011: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.4-1/input0 [ 1911.082324][T22371] usb 5-1: USB disconnect, device number 94 [ 1911.857118][T11149] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1912.217608][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.228774][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.238877][T11149] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1912.248722][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.260380][T11149] usb 5-1: config 0 descriptor?? 22:57:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x37, {0x37, 0x0, "0024720000da5bd254935fe7f80bf4c758ebb08151d92c001e0e389b21cb30571f06a42856529d199af8a3d39aa1c25f78fa5fa8da"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:57:17 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) 22:57:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1a000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:17 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x30, &(0x7f0000000000), 0x20a154cc) 22:57:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3860, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}, "020088beffff0064"}}}}}, 0x0) 22:57:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600700}, {0x4c}, {0x6}]}) [ 1912.647432][T11149] usbhid 5-1:0.0: can't add hid device: -71 [ 1912.653803][T11149] usbhid: probe of 5-1:0.0 failed with error -71 [ 1912.673398][ T28] audit: type=1326 audit(1600210638.103:1406): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13444 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3860, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}, "020088beffff0064"}}}}}, 0x0) [ 1912.703152][T11149] usb 5-1: USB disconnect, device number 95 [ 1912.787136][T13456] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:18 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x30, &(0x7f0000000000), 0x20a154cc) 22:57:18 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) 22:57:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1a010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3860, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}, "020088beffff0064"}}}}}, 0x0) [ 1913.256888][T13472] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1913.277100][T11149] usb 5-1: new high-speed USB device number 96 using dummy_hcd 22:57:18 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) [ 1913.473910][ T28] audit: type=1326 audit(1600210638.903:1407): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13444 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1913.661724][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.673051][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1913.683269][T11149] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1913.694334][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.717113][T11149] usb 5-1: config 0 descriptor?? [ 1914.078297][T11149] usbhid 5-1:0.0: can't add hid device: -71 [ 1914.084631][T11149] usbhid: probe of 5-1:0.0 failed with error -71 [ 1914.125394][T11149] usb 5-1: USB disconnect, device number 96 [ 1914.577032][T11149] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1914.937210][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1914.948280][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1914.958413][T11149] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1914.967815][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.981990][T11149] usb 5-1: config 0 descriptor?? [ 1915.471698][T11149] wacom 0003:056A:00B2.0012: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 1915.483394][T11149] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B2.0012/input/input55 [ 1915.593224][T11149] wacom 0003:056A:00B2.0012: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.4-1/input0 [ 1915.697347][ T27] usb 5-1: USB disconnect, device number 97 22:57:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x37, {0x37, 0x0, "0024720000da5bd254935fe7f80bf4c758ebb08151d92c001e0e389b21cb30571f06a42856529d199af8a3d39aa1c25f78fa5fa8da"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:57:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1a020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:21 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x30, &(0x7f0000000000), 0x20a154cc) 22:57:21 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007021dfffd946f6105000a0000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1}, 0x0) 22:57:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600800}, {0x4c}, {0x6}]}) 22:57:21 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) [ 1916.375772][T13526] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1916.386301][ T28] audit: type=1326 audit(1600210641.823:1408): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13521 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:22 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007021dfffd946f6105000a0000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1}, 0x0) 22:57:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) 22:57:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1a030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:22 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0xff0f}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 22:57:22 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007021dfffd946f6105000a0000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1}, 0x0) [ 1916.956030][T13539] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1916.997216][T11149] usb 5-1: new high-speed USB device number 98 using dummy_hcd 22:57:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1b000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1917.192251][ T28] audit: type=1326 audit(1600210642.623:1409): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13521 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1917.357924][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.369198][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.379374][T11149] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1917.388718][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.450291][T13551] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1917.481935][T11149] usb 5-1: config 0 descriptor?? [ 1917.837019][T11149] usbhid 5-1:0.0: can't add hid device: -71 [ 1917.843411][T11149] usbhid: probe of 5-1:0.0 failed with error -71 [ 1917.879211][T11149] usb 5-1: USB disconnect, device number 98 [ 1918.316803][T11149] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1918.677304][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1918.688580][T11149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1918.698715][T11149] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1918.707989][T11149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.727380][T11149] usb 5-1: config 0 descriptor?? [ 1919.211584][T11149] wacom 0003:056A:00B2.0013: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 1919.223579][T11149] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B2.0013/input/input58 [ 1919.332147][T11149] wacom 0003:056A:00B2.0013: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.4-1/input0 [ 1919.426699][T11149] usb 5-1: USB disconnect, device number 99 22:57:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x37, {0x37, 0x0, "0024720000da5bd254935fe7f80bf4c758ebb08151d92c001e0e389b21cb30571f06a42856529d199af8a3d39aa1c25f78fa5fa8da"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:57:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600900}, {0x4c}, {0x6}]}) 22:57:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) 22:57:25 executing program 3: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007021dfffd946f6105000a0000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1}, 0x0) 22:57:25 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0xff0f}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 22:57:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1b010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1920.065746][ T28] audit: type=1326 audit(1600210645.493:1410): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1920.092348][T13597] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:25 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) 22:57:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) 22:57:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1b020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:25 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0xff0f}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) [ 1920.517081][ T9928] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1920.654450][T13615] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) [ 1920.867160][ T28] audit: type=1326 audit(1600210646.293:1411): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1b030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1920.907119][ T9928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1920.918457][ T9928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1920.928528][ T9928] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1920.937816][ T9928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.156136][ T9928] usb 5-1: config 0 descriptor?? [ 1921.175560][T13622] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1921.497163][ T9928] usbhid 5-1:0.0: can't add hid device: -71 [ 1921.503455][ T9928] usbhid: probe of 5-1:0.0 failed with error -71 [ 1921.548084][ T9928] usb 5-1: USB disconnect, device number 100 [ 1921.996534][ T9928] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1922.386779][ T9928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1922.398024][ T9928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1922.408146][ T9928] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 1922.417549][ T9928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.432663][ T9928] usb 5-1: config 0 descriptor?? [ 1922.921297][ T9928] wacom 0003:056A:00B2.0014: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 1922.932956][ T9928] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B2.0014/input/input61 [ 1923.060870][ T9928] wacom 0003:056A:00B2.0014: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.4-1/input0 [ 1923.140331][ T3228] usb 5-1: USB disconnect, device number 101 22:57:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600a00}, {0x4c}, {0x6}]}) 22:57:29 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) 22:57:29 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x76, &(0x7f0000000280)={0x0, 0xff0f}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r1) dup3(r5, r0, 0x0) 22:57:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}}, 0x0) 22:57:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1c000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1923.825244][T13670] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1923.843211][T13670] device gretap0 entered promiscuous mode [ 1923.852040][ T28] audit: type=1326 audit(1600210649.284:1412): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:29 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) [ 1923.923685][T13670] device gretap0 left promiscuous mode 22:57:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010100000000fffff000000000000500010006"], 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 22:57:29 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000300)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) [ 1924.506940][T13669] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1924.601923][ T28] audit: type=1326 audit(1600210650.034:1413): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010100000000fffff000000000000500010006"], 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 22:57:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}}, 0x0) 22:57:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x3c, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) 22:57:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600b00}, {0x4c}, {0x6}]}) 22:57:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1c010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x88}}, 0x0) [ 1925.072531][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1925.143068][ T28] audit: type=1326 audit(1600210650.574:1414): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13699 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1925.166460][T13701] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1925.185729][T13709] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1925.248956][T13697] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1925.259649][T13710] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1925.276619][T13710] device gretap0 entered promiscuous mode 22:57:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1c020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1925.385962][T13710] device gretap0 left promiscuous mode 22:57:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010100000000fffff000000000000500010006"], 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 22:57:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x3c, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) 22:57:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x88}}, 0x0) [ 1925.912570][T13718] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1925.921976][T13720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1926.002576][T13724] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 22:57:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010100000000fffff000000000000500010006"], 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 22:57:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1c030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600c00}, {0x4c}, {0x6}]}) 22:57:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}}, 0x0) 22:57:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x3c, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) 22:57:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x88}}, 0x0) [ 1926.457651][T13738] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1926.471601][ T28] audit: type=1326 audit(1600210651.904:1415): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13737 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1926.587239][T13744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1926.651939][T13745] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1926.669965][T13745] device gretap0 entered promiscuous mode 22:57:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1d000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1926.790635][T13745] device gretap0 left promiscuous mode 22:57:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b785bddcf97f3ff91a7d503d6659d20b8be13ae064c990a0026866c0c522be0b", 0x20) 22:57:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x88}}, 0x0) [ 1927.267530][ T28] audit: type=1326 audit(1600210652.704:1416): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13737 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600d00}, {0x4c}, {0x6}]}) [ 1927.461257][T13750] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1927.479116][T13757] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0}) 22:57:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x64}}, 0x0) 22:57:33 executing program 4: unshare(0x2000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000008000000080009000000000006"], 0x2c}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000100)) [ 1927.766284][ T28] audit: type=1326 audit(1600210653.194:1417): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13768 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x3c, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) 22:57:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1d010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1927.964744][T13773] device gretap0 entered promiscuous mode [ 1927.996678][T13773] device gretap0 left promiscuous mode 22:57:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0}) 22:57:33 executing program 4: unshare(0x2000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000008000000080009000000000006"], 0x2c}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000100)) [ 1928.553940][ T28] audit: type=1326 audit(1600210653.984:1418): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13768 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0}) [ 1928.637998][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x600e00}, {0x4c}, {0x6}]}) 22:57:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1d020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1929.075725][ T28] audit: type=1326 audit(1600210654.504:1419): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13800 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0}) 22:57:34 executing program 4: unshare(0x2000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000008000000080009000000000006"], 0x2c}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000100)) 22:57:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1d030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:34 executing program 2: unshare(0x40600) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) 22:57:34 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:57:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1e000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:35 executing program 4: unshare(0x2000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000000008000000080009000000000006"], 0x2c}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000100)) 22:57:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x400000b}, 0x10) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="24000000520007a9b2c2f95b21cf9c00020000001f00000000000800050006000400ff7e", 0x24}], 0x1}, 0x0) [ 1929.862078][ T28] audit: type=1326 audit(1600210655.294:1420): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13800 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe8}}, @TCA_FLOW_KEYS={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:57:35 executing program 2: unshare(0x40600) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) 22:57:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x700000}, {0x4c}, {0x6}]}) 22:57:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1e010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1930.274701][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x400000b}, 0x10) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="24000000520007a9b2c2f95b21cf9c00020000001f00000000000800050006000400ff7e", 0x24}], 0x1}, 0x0) 22:57:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)={0x20, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4}]}, 0x20}], 0x1}, 0x0) [ 1930.365224][ T28] audit: type=1326 audit(1600210655.794:1421): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13829 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1930.391297][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1930.472263][T13839] validate_nla: 6 callbacks suppressed [ 1930.472297][T13839] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:36 executing program 2: unshare(0x40600) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) 22:57:36 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe8}}, @TCA_FLOW_KEYS={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:57:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1e020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x400000b}, 0x10) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="24000000520007a9b2c2f95b21cf9c00020000001f00000000000800050006000400ff7e", 0x24}], 0x1}, 0x0) [ 1930.930303][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)={0x20, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4}]}, 0x20}], 0x1}, 0x0) [ 1931.050209][T13855] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:36 executing program 2: unshare(0x40600) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) [ 1931.143311][ T28] audit: type=1326 audit(1600210656.574:1422): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13829 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:36 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe8}}, @TCA_FLOW_KEYS={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 22:57:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1e030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x700100}, {0x4c}, {0x6}]}) 22:57:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)={0x20, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4}]}, 0x20}], 0x1}, 0x0) 22:57:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x400000b}, 0x10) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="24000000520007a9b2c2f95b21cf9c00020000001f00000000000800050006000400ff7e", 0x24}], 0x1}, 0x0) [ 1931.591553][T13867] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1931.600948][T13866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:37 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#! \x13\xdb\xb9\xdaU\xb1\xea\xa3\x8a\x91C\xd6\x9fA\xe9\xfb7\xb6\xe5(\x19\xb2y\x02MO&\xcb*p<\xa4\x84\xfa5\xd7YX]z<\xf3T\xf6\x80\xafm\xcfr\xe6\x17\xe1o\x81G\x1e:\x00}[\xfaY-\x13K0\'s\xe0\xceQ\x8b\xdc \xba\x05\x14\\!\x97E\x859\xb6\x7f*\xe8\xc6\xff\xe7[\xb4\xb98!\a\xd3\xed\x96&\xfd\x18G\xbc\xa5.a\xc9\xfe\xe4\x8d\xb3w\x9a\xa4\x10\xed\'!&', 0x3) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="23215de0d6da748ef720"], 0xc0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 1931.697663][ T28] audit: type=1326 audit(1600210657.134:1423): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13868 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:37 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe8}}, @TCA_FLOW_KEYS={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1932.001136][T13880] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/3' not defined. 22:57:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)={0x20, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4}]}, 0x20}], 0x1}, 0x0) 22:57:37 executing program 3: add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, &(0x7f0000000200)='0u', 0x2, 0xfffffffffffffffe) [ 1932.140363][T13884] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:37 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#! \x13\xdb\xb9\xdaU\xb1\xea\xa3\x8a\x91C\xd6\x9fA\xe9\xfb7\xb6\xe5(\x19\xb2y\x02MO&\xcb*p<\xa4\x84\xfa5\xd7YX]z<\xf3T\xf6\x80\xafm\xcfr\xe6\x17\xe1o\x81G\x1e:\x00}[\xfaY-\x13K0\'s\xe0\xceQ\x8b\xdc \xba\x05\x14\\!\x97E\x859\xb6\x7f*\xe8\xc6\xff\xe7[\xb4\xb98!\a\xd3\xed\x96&\xfd\x18G\xbc\xa5.a\xc9\xfe\xe4\x8d\xb3w\x9a\xa4\x10\xed\'!&', 0x3) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="23215de0d6da748ef720"], 0xc0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 1932.264427][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000140)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e004005ff7e", 0x24}], 0x1}, 0x0) [ 1932.511291][ T28] audit: type=1326 audit(1600210657.944:1424): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13868 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:38 executing program 3: add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, &(0x7f0000000200)='0u', 0x2, 0xfffffffffffffffe) [ 1932.632669][T13900] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x700200}, {0x4c}, {0x6}]}) 22:57:38 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d09dcc081e090300c005000000010902240001000000000904"], 0x0) 22:57:38 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#! \x13\xdb\xb9\xdaU\xb1\xea\xa3\x8a\x91C\xd6\x9fA\xe9\xfb7\xb6\xe5(\x19\xb2y\x02MO&\xcb*p<\xa4\x84\xfa5\xd7YX]z<\xf3T\xf6\x80\xafm\xcfr\xe6\x17\xe1o\x81G\x1e:\x00}[\xfaY-\x13K0\'s\xe0\xceQ\x8b\xdc \xba\x05\x14\\!\x97E\x859\xb6\x7f*\xe8\xc6\xff\xe7[\xb4\xb98!\a\xd3\xed\x96&\xfd\x18G\xbc\xa5.a\xc9\xfe\xe4\x8d\xb3w\x9a\xa4\x10\xed\'!&', 0x3) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="23215de0d6da748ef720"], 0xc0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 22:57:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:38 executing program 3: add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, &(0x7f0000000200)='0u', 0x2, 0xfffffffffffffffe) 22:57:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000003b0000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0x2}}}}]}]}]}}]}, 0x58}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1933.228350][ T9928] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1933.244341][ T28] audit: type=1326 audit(1600210658.674:1425): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13911 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1933.270937][T13914] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:38 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#! \x13\xdb\xb9\xdaU\xb1\xea\xa3\x8a\x91C\xd6\x9fA\xe9\xfb7\xb6\xe5(\x19\xb2y\x02MO&\xcb*p<\xa4\x84\xfa5\xd7YX]z<\xf3T\xf6\x80\xafm\xcfr\xe6\x17\xe1o\x81G\x1e:\x00}[\xfaY-\x13K0\'s\xe0\xceQ\x8b\xdc \xba\x05\x14\\!\x97E\x859\xb6\x7f*\xe8\xc6\xff\xe7[\xb4\xb98!\a\xd3\xed\x96&\xfd\x18G\xbc\xa5.a\xc9\xfe\xe4\x8d\xb3w\x9a\xa4\x10\xed\'!&', 0x3) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="23215de0d6da748ef720"], 0xc0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 22:57:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1933.442371][T13919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1933.516153][ T9928] usb 6-1: Using ep0 maxpacket: 8 22:57:39 executing program 3: add_key(&(0x7f0000000280)='pkcs7_test\x00', 0x0, &(0x7f0000000200)='0u', 0x2, 0xfffffffffffffffe) [ 1933.666936][ T9928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.677276][ T9928] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 5.c0 [ 1933.686566][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.708095][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1933.842888][T13930] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1933.878062][ T9928] usb 6-1: config 0 descriptor?? 22:57:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000003b0000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0x2}}}}]}]}]}}]}, 0x58}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1933.919843][ T9928] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1933.928376][ T9928] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1933.935927][ T9928] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1934.037410][ T28] audit: type=1326 audit(1600210659.474:1426): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13911 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1934.120302][ T9928] usb 6-1: USB disconnect, device number 68 [ 1934.128287][ T9928] garmin_gps 6-1:0.0: device disconnected 22:57:39 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 22:57:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x700300}, {0x4c}, {0x6}]}) [ 1934.380861][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1934.544786][ T28] audit: type=1326 audit(1600210659.974:1427): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1934.946074][ T9928] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1935.205922][ T9928] usb 6-1: Using ep0 maxpacket: 8 [ 1935.332901][ T28] audit: type=1326 audit(1600210660.764:1428): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1935.356138][ T9928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.366514][ T9928] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 5.c0 [ 1935.375809][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.398542][ T9928] usb 6-1: config 0 descriptor?? [ 1935.441645][ T9928] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1935.450520][ T9928] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1935.458157][ T9928] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1935.640171][ T7708] usb 6-1: USB disconnect, device number 69 [ 1935.648280][ T7708] garmin_gps 6-1:0.0: device disconnected 22:57:41 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d09dcc081e090300c005000000010902240001000000000904"], 0x0) 22:57:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x5}]}}}]}, 0x3c}}, 0x0) 22:57:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 22:57:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000003b0000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0x2}}}}]}]}]}}]}, 0x58}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:57:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800000}, {0x4c}, {0x6}]}) [ 1935.868058][ T28] audit: type=1326 audit(1600210661.304:1429): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13981 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1935.871898][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1935.961429][T13986] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 22:57:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000003b0000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0x2}}}}]}]}]}}]}, 0x58}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:57:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x5}]}}}]}, 0x3c}}, 0x0) [ 1936.476846][ T9928] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1936.591265][T14073] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1936.664720][T14076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1936.706292][ T28] audit: type=1326 audit(1600210662.134:1430): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13981 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1936.768604][ T9928] usb 6-1: Using ep0 maxpacket: 8 [ 1936.906631][ T9928] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1936.917778][ T9928] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 5.c0 [ 1936.927141][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:57:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1937.016166][ T9928] usb 6-1: config 0 descriptor?? [ 1937.061002][ T9928] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1937.069778][ T9928] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1937.077591][ T9928] garmin_gps: probe of ttyUSB0 failed with error -22 22:57:42 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800100}, {0x4c}, {0x6}]}) [ 1937.271767][ T9928] usb 6-1: USB disconnect, device number 70 [ 1937.279581][ T9928] garmin_gps 6-1:0.0: device disconnected [ 1937.370537][T14131] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1937.498557][ T28] audit: type=1326 audit(1600210662.934:1431): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:43 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d09dcc081e090300c005000000010902240001000000000904"], 0x0) 22:57:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 22:57:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 22:57:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x5}]}}}]}, 0x3c}}, 0x0) 22:57:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1937.924328][T14138] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x44}}, 0x0) 22:57:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1938.300706][ T28] audit: type=1326 audit(1600210663.734:1432): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14134 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1938.402097][T14186] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops [ 1938.436335][T14187] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x5}]}}}]}, 0x3c}}, 0x0) 22:57:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800200}, {0x4c}, {0x6}]}) [ 1938.509074][T19846] usb 6-1: new high-speed USB device number 71 using dummy_hcd 22:57:44 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 22:57:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x44}}, 0x0) [ 1938.755558][T19846] usb 6-1: Using ep0 maxpacket: 8 [ 1938.812309][T14229] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1938.871941][ T28] audit: type=1326 audit(1600210664.304:1433): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14225 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1938.876042][T19846] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1938.903484][T19846] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 5.c0 [ 1938.912807][T19846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.106016][T14234] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops [ 1939.187184][T19846] usb 6-1: config 0 descriptor?? [ 1939.229198][T19846] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1939.238110][T19846] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1939.245652][T19846] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1939.483522][T19846] usb 6-1: USB disconnect, device number 71 [ 1939.490809][T19846] garmin_gps 6-1:0.0: device disconnected [ 1939.651702][ T28] audit: type=1326 audit(1600210665.085:1434): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14225 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:45 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d09dcc081e090300c005000000010902240001000000000904"], 0x0) 22:57:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x44}}, 0x0) 22:57:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 22:57:45 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 22:57:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800300}, {0x4c}, {0x6}]}) [ 1940.118847][T14252] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1940.142034][ T28] audit: type=1326 audit(1600210665.575:1435): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14251 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1940.168852][T14257] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 22:57:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x22000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1940.417169][T14266] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x44}}, 0x0) 22:57:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x22010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1940.645398][ T4012] usb 6-1: new high-speed USB device number 72 using dummy_hcd 22:57:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 22:57:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) [ 1940.761216][T14273] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1940.778540][T14272] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops [ 1940.895565][ T4012] usb 6-1: Using ep0 maxpacket: 8 [ 1940.939617][ T28] audit: type=1326 audit(1600210666.375:1436): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14251 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) [ 1941.036975][ T4012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.047454][ T4012] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 5.c0 [ 1941.057058][ T4012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.253189][ T4012] usb 6-1: config 0 descriptor?? [ 1941.299501][ T4012] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1941.309207][ T4012] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1941.316745][ T4012] garmin_gps: probe of ttyUSB0 failed with error -22 [ 1941.526241][ T4012] usb 6-1: USB disconnect, device number 72 [ 1941.534104][ T4012] garmin_gps 6-1:0.0: device disconnected 22:57:47 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800400}, {0x4c}, {0x6}]}) 22:57:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x22020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 22:57:47 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x8000003) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="a0f431bd879a7599545699107d3fd3809a4acd191432dfff54d18357852e", 0x1e) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000, @loopback}, 0x1c) r2 = creat(0x0, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa4, 0x3ed, 0x200, 0x70bd28, 0x25dfdbfd, "c00e0a739c7da6a44c9dbfdc95dce34e8015234ab088a3032c33ab7ff5c52cb5829376a7fc6eb7042a3e1ec11fcf4c29d7c81b504932f30e6a629cf538e7e707add7cfc4a65fa2cb79eef3735813065caee802d01b5b0f0e67cc9da5b94d8863c8b5b88da6009598fe1d18027aa679b8d3d8ab865bcb0e6e3a9711e8e0c25996de0e2c5043f1db6928c6022d3d5f4814488f", ["", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c0}, 0x20048811) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfd14) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 22:57:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) [ 1942.260606][T14311] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1942.305334][ T28] audit: type=1326 audit(1600210667.705:1437): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14305 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}]}]}, 0x30}}, 0x0) 22:57:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x22030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x10000) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 22:57:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe) recvmmsg(r3, &(0x7f0000004100), 0x316, 0x3b9ac9ff, &(0x7f0000004a80)={0x77359400}) [ 1942.998123][ T28] audit: type=1326 audit(1600210668.435:1438): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14305 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1943.024651][T14323] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:48 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}]}]}, 0x30}}, 0x0) 22:57:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800500}, {0x4c}, {0x6}]}) 22:57:48 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x8000003) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="a0f431bd879a7599545699107d3fd3809a4acd191432dfff54d18357852e", 0x1e) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000, @loopback}, 0x1c) r2 = creat(0x0, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa4, 0x3ed, 0x200, 0x70bd28, 0x25dfdbfd, "c00e0a739c7da6a44c9dbfdc95dce34e8015234ab088a3032c33ab7ff5c52cb5829376a7fc6eb7042a3e1ec11fcf4c29d7c81b504932f30e6a629cf538e7e707add7cfc4a65fa2cb79eef3735813065caee802d01b5b0f0e67cc9da5b94d8863c8b5b88da6009598fe1d18027aa679b8d3d8ab865bcb0e6e3a9711e8e0c25996de0e2c5043f1db6928c6022d3d5f4814488f", ["", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c0}, 0x20048811) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfd14) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 22:57:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x23000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1943.520220][ T28] audit: type=1326 audit(1600210668.955:1439): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14333 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1943.570901][T14337] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe) recvmmsg(r3, &(0x7f0000004100), 0x316, 0x3b9ac9ff, &(0x7f0000004a80)={0x77359400}) 22:57:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}]}]}, 0x30}}, 0x0) 22:57:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @random="00fdee00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 22:57:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x23010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1944.211992][T14348] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1944.315975][ T28] audit: type=1326 audit(1600210669.745:1440): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14333 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}]}]}, 0x30}}, 0x0) 22:57:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe) recvmmsg(r3, &(0x7f0000004100), 0x316, 0x3b9ac9ff, &(0x7f0000004a80)={0x77359400}) 22:57:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800600}, {0x4c}, {0x6}]}) 22:57:50 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x8000003) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="a0f431bd879a7599545699107d3fd3809a4acd191432dfff54d18357852e", 0x1e) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000, @loopback}, 0x1c) r2 = creat(0x0, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa4, 0x3ed, 0x200, 0x70bd28, 0x25dfdbfd, "c00e0a739c7da6a44c9dbfdc95dce34e8015234ab088a3032c33ab7ff5c52cb5829376a7fc6eb7042a3e1ec11fcf4c29d7c81b504932f30e6a629cf538e7e707add7cfc4a65fa2cb79eef3735813065caee802d01b5b0f0e67cc9da5b94d8863c8b5b88da6009598fe1d18027aa679b8d3d8ab865bcb0e6e3a9711e8e0c25996de0e2c5043f1db6928c6022d3d5f4814488f", ["", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c0}, 0x20048811) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfd14) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 22:57:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @random="00fdee00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 22:57:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x23020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:50 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f907}}) [ 1944.910940][T14362] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1944.972133][ T28] audit: type=1326 audit(1600210670.405:1441): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14358 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r2, 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe) recvmmsg(r3, &(0x7f0000004100), 0x316, 0x3b9ac9ff, &(0x7f0000004a80)={0x77359400}) 22:57:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x23030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @random="00fdee00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 22:57:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f907}}) [ 1945.720658][T14374] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1945.760373][ T28] audit: type=1326 audit(1600210671.195:1442): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14358 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:51 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x8000003) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="a0f431bd879a7599545699107d3fd3809a4acd191432dfff54d18357852e", 0x1e) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000, @loopback}, 0x1c) r2 = creat(0x0, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa4, 0x3ed, 0x200, 0x70bd28, 0x25dfdbfd, "c00e0a739c7da6a44c9dbfdc95dce34e8015234ab088a3032c33ab7ff5c52cb5829376a7fc6eb7042a3e1ec11fcf4c29d7c81b504932f30e6a629cf538e7e707add7cfc4a65fa2cb79eef3735813065caee802d01b5b0f0e67cc9da5b94d8863c8b5b88da6009598fe1d18027aa679b8d3d8ab865bcb0e6e3a9711e8e0c25996de0e2c5043f1db6928c6022d3d5f4814488f", ["", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c0}, 0x20048811) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfd14) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 22:57:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @random="00fdee00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x18, 0x11, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 22:57:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x24000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800700}, {0x4c}, {0x6}]}) 22:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001100290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000009000000000014001a8008000300000000800800000002"], 0x34}}, 0x0) 22:57:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f907}}) [ 1946.356370][ T28] audit: type=1326 audit(1600210671.785:1443): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1946.381384][T14386] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 22:57:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x24010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001100290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000009000000000014001a8008000300000000800800000002"], 0x34}}, 0x0) 22:57:52 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f907}}) [ 1947.157293][ T28] audit: type=1326 audit(1600210672.595:1444): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 22:57:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newnexthop={0x34, 0x68, 0x3, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x0) 22:57:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800800}, {0x4c}, {0x6}]}) 22:57:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x24020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001100290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000009000000000014001a8008000300000000800800000002"], 0x34}}, 0x0) [ 1947.658553][ T28] audit: type=1326 audit(1600210673.095:1445): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:53 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r3, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b"], 0x68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:57:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 22:57:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newnexthop={0x34, 0x68, 0x3, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x0) [ 1947.853182][T14413] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1948.007500][T14419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x24030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001100290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000009000000000014001a8008000300000000800800000002"], 0x34}}, 0x0) [ 1948.194974][T14425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 22:57:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newnexthop={0x34, 0x68, 0x3, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x0) 22:57:53 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r3, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b"], 0x68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1948.434494][ T28] audit: type=1326 audit(1600210673.865:1446): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1948.450251][T14433] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800900}, {0x4c}, {0x6}]}) 22:57:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x25000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1948.733718][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 22:57:54 executing program 3: unshare(0x2a000400) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000000000)='\ttm\xbf\x90\x17\'\x92\xb42', 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 22:57:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000850d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400020008000500", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1949.026359][ T28] audit: type=1326 audit(1600210674.465:1447): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14448 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newnexthop={0x34, 0x68, 0x3, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x0) 22:57:54 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r3, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b"], 0x68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1949.095190][T14452] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x25010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:54 executing program 3: unshare(0x2a000400) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000000000)='\ttm\xbf\x90\x17\'\x92\xb42', 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) [ 1949.291160][T14459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1949.391981][T14462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1949.572602][T14477] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:55 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000200), 0x24, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 22:57:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000850d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400020008000500", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1949.819613][ T28] audit: type=1326 audit(1600210675.255:1448): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14448 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:55 executing program 3: unshare(0x2a000400) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000000000)='\ttm\xbf\x90\x17\'\x92\xb42', 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 22:57:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x25020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800a00}, {0x4c}, {0x6}]}) 22:57:55 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r3, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b"], 0x68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1950.097866][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:57:55 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000200), 0x24, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1950.274736][ T28] audit: type=1326 audit(1600210675.705:1449): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14506 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1950.427135][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1950.466918][T14509] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:56 executing program 3: unshare(0x2a000400) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000000000)='\ttm\xbf\x90\x17\'\x92\xb42', 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 22:57:56 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000200), 0x24, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 22:57:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000850d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400020008000500", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 22:57:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x25030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x40305839, 0x0) [ 1950.992589][T14529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1951.097809][ T28] audit: type=1326 audit(1600210676.535:1450): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14506 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:56 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000200), 0x24, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 22:57:56 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0008000100000000010000aba20400fff6", 0x24}], 0x1}, 0x0) [ 1951.298917][T14544] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:57:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800b00}, {0x4c}, {0x6}]}) 22:57:56 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xd0, 0x44, 0xb1, 0x40, 0xe41, 0x4153, 0xb257, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x45, 0xcd, 0x1}}]}}]}}, 0x0) 22:57:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x26000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000850d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400020008000500", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1951.581918][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1951.599191][ T28] audit: type=1326 audit(1600210677.035:1451): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14553 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:57:57 executing program 4: getpriority(0x0, 0xffffffffffffffff) 22:57:57 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0008000100000000010000aba20400fff6", 0x24}], 0x1}, 0x0) [ 1951.874573][T14559] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1951.901955][T14561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:57:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x26010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x240007fd}, 0x10) write(r0, &(0x7f00000000c0)="1800000016009b8a14e5f407000000000a640bda75000000", 0x18) [ 1952.154708][ T3228] usb 6-1: new high-speed USB device number 73 using dummy_hcd 22:57:57 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0008000100000000010000aba20400fff6", 0x24}], 0x1}, 0x0) [ 1952.421019][T14585] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1952.525888][ T3228] usb 6-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice=b2.57 [ 1952.535433][ T3228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:57:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800c00}, {0x4c}, {0x6}]}) 22:57:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) [ 1952.655864][ T3228] usb 6-1: config 0 descriptor?? [ 1952.705594][ T3228] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX found [ 1952.712680][ T3228] usb 6-1: selecting invalid altsetting 2 [ 1952.718741][ T3228] snd_usb_toneport 6-1:0.0: set_interface failed [ 1952.726166][ T3228] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX now disconnected [ 1952.734599][ T3228] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 22:57:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x26020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x240007fd}, 0x10) write(r0, &(0x7f00000000c0)="1800000016009b8a14e5f407000000000a640bda75000000", 0x18) [ 1952.823366][T14595] usb usb9: usbfs: process 14595 (syz-executor.2) did not claim interface 0 before use [ 1952.833491][T14595] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 1952.930705][ T3228] usb 6-1: USB disconnect, device number 73 [ 1952.949783][ T28] audit: type=1326 audit(1600210678.385:1452): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14596 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1952.993355][T14604] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1953.685003][ T3228] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1953.716090][ T28] audit: type=1326 audit(1600210679.155:1453): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14596 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1954.045323][ T3228] usb 6-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice=b2.57 [ 1954.054552][ T3228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.065305][ T3228] usb 6-1: config 0 descriptor?? [ 1954.113561][ T3228] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX found [ 1954.121431][ T3228] usb 6-1: selecting invalid altsetting 2 [ 1954.127551][ T3228] snd_usb_toneport 6-1:0.0: set_interface failed [ 1954.134198][ T3228] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX now disconnected [ 1954.142672][ T3228] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 1954.309721][ T3228] usb 6-1: USB disconnect, device number 74 22:57:59 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xd0, 0x44, 0xb1, 0x40, 0xe41, 0x4153, 0xb257, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x45, 0xcd, 0x1}}]}}]}}, 0x0) 22:57:59 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0008000100000000010000aba20400fff6", 0x24}], 0x1}, 0x0) 22:57:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) 22:57:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x240007fd}, 0x10) write(r0, &(0x7f00000000c0)="1800000016009b8a14e5f407000000000a640bda75000000", 0x18) 22:57:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x26030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:57:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800d00}, {0x4c}, {0x6}]}) [ 1954.486847][ T28] audit: type=1326 audit(1600210679.925:1454): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14623 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1954.541609][T14628] __nla_validate_parse: 2 callbacks suppressed [ 1954.541648][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1954.556745][T14631] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1954.598109][T14634] usb usb9: usbfs: process 14634 (syz-executor.2) did not claim interface 0 before use [ 1954.608193][T14634] vhci_hcd: default hub control req: 010b v0000 i0000 l0 22:58:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x240007fd}, 0x10) write(r0, &(0x7f00000000c0)="1800000016009b8a14e5f407000000000a640bda75000000", 0x18) 22:58:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x27000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1954.884828][T19846] usb 6-1: new high-speed USB device number 75 using dummy_hcd 22:58:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x18, "f3e36dd2ae43a23f2edc2a7c07d4"}, @generic={0x0, 0xf, "273861947fb263d43d0ee6b1cc"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "db41db024428000d32da61024d9afc46"}, @sack={0x5, 0x6, [0x0]}]}}}}}}}}, 0x0) 22:58:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) [ 1955.088193][T14642] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1955.246648][T19846] usb 6-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice=b2.57 [ 1955.256257][T19846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.306735][ T28] audit: type=1326 audit(1600210680.745:1455): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14623 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1955.352090][T14648] usb usb9: usbfs: process 14648 (syz-executor.2) did not claim interface 0 before use [ 1955.362285][T14648] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 1955.375470][T19846] usb 6-1: config 0 descriptor?? 22:58:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x27010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:00 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1955.462727][T19846] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX found [ 1955.470783][T19846] usb 6-1: selecting invalid altsetting 2 [ 1955.476881][T19846] snd_usb_toneport 6-1:0.0: set_interface failed [ 1955.483549][T19846] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX now disconnected [ 1955.492140][T19846] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 1955.692019][T14654] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1955.727872][T19846] usb 6-1: USB disconnect, device number 75 22:58:01 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xd0, 0x44, 0xb1, 0x40, 0xe41, 0x4153, 0xb257, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x45, 0xcd, 0x1}}]}}]}}, 0x0) 22:58:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x18, "f3e36dd2ae43a23f2edc2a7c07d4"}, @generic={0x0, 0xf, "273861947fb263d43d0ee6b1cc"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "db41db024428000d32da61024d9afc46"}, @sack={0x5, 0x6, [0x0]}]}}}}}}}}, 0x0) 22:58:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) 22:58:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x800e00}, {0x4c}, {0x6}]}) 22:58:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x3c, 0x2, [@TCA_ROUTE4_ACT={0x38, 0x6, [@m_xt={0x34, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:58:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x27020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1956.342928][T14666] usb usb9: usbfs: process 14666 (syz-executor.2) did not claim interface 0 before use [ 1956.353042][T14666] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 1956.366952][T14673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1956.400117][ T28] audit: type=1326 audit(1600210681.836:1456): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14669 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1956.461799][T14671] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1956.578740][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:58:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x18, "f3e36dd2ae43a23f2edc2a7c07d4"}, @generic={0x0, 0xf, "273861947fb263d43d0ee6b1cc"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "db41db024428000d32da61024d9afc46"}, @sack={0x5, 0x6, [0x0]}]}}}}}}}}, 0x0) 22:58:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x27030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) 22:58:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x3c, 0x2, [@TCA_ROUTE4_ACT={0x38, 0x6, [@m_xt={0x34, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1957.015760][ T27] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1957.093710][T14690] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1957.162493][ T28] audit: type=1326 audit(1600210682.596:1457): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14669 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x18, "f3e36dd2ae43a23f2edc2a7c07d4"}, @generic={0x0, 0xf, "273861947fb263d43d0ee6b1cc"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "db41db024428000d32da61024d9afc46"}, @sack={0x5, 0x6, [0x0]}]}}}}}}}}, 0x0) 22:58:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x900000}, {0x4c}, {0x6}]}) [ 1957.362783][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1957.405067][ T27] usb 6-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice=b2.57 [ 1957.420394][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.503264][ T27] usb 6-1: config 0 descriptor?? [ 1957.552553][ T27] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX found [ 1957.552725][ T27] usb 6-1: selecting invalid altsetting 2 [ 1957.552879][ T27] snd_usb_toneport 6-1:0.0: set_interface failed [ 1957.553098][ T27] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX now disconnected [ 1957.553581][ T27] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 1957.624767][ T28] audit: type=1326 audit(1600210683.056:1458): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14705 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1957.768995][T19846] usb 6-1: USB disconnect, device number 76 22:58:03 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xd0, 0x44, 0xb1, 0x40, 0xe41, 0x4153, 0xb257, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x45, 0xcd, 0x1}}]}}]}}, 0x0) 22:58:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x28000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x3c, 0x2, [@TCA_ROUTE4_ACT={0x38, 0x6, [@m_xt={0x34, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:58:03 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x0, 0xf7}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) 22:58:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) [ 1958.424857][T14723] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1958.438769][T14724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1958.448539][ T28] audit: type=1326 audit(1600210683.886:1459): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14705 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x900100}, {0x4c}, {0x6}]}) 22:58:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x0, 0xf7}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) 22:58:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x28010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x37}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x3c, 0x2, [@TCA_ROUTE4_ACT={0x38, 0x6, [@m_xt={0x34, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1958.874874][T11149] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1958.970944][ T28] audit: type=1326 audit(1600210684.406:1460): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14736 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1959.097284][T14742] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x0, 0xf7}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) [ 1959.235310][T11149] usb 6-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice=b2.57 [ 1959.244851][T11149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 22:58:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) [ 1959.353408][T11149] usb 6-1: config 0 descriptor?? 22:58:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x28020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1959.405986][T11149] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX found [ 1959.413203][T11149] usb 6-1: selecting invalid altsetting 2 [ 1959.419291][T11149] snd_usb_toneport 6-1:0.0: set_interface failed [ 1959.426040][T11149] snd_usb_toneport 6-1:0.0: Line 6 POD Studio GX now disconnected [ 1959.434541][T11149] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 1959.468264][T14745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1959.627646][ T3228] usb 6-1: USB disconnect, device number 77 [ 1959.756301][T14762] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1959.798101][ T28] audit: type=1326 audit(1600210685.236:1461): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14736 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:05 executing program 4: gettid() 22:58:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x0, 0xf7}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) 22:58:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x900200}, {0x4c}, {0x6}]}) 22:58:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x28030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) [ 1960.408781][T14774] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1960.433322][ T28] audit: type=1326 audit(1600210685.866:1462): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14771 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:06 executing program 5: r0 = getpid() ioprio_get$pid(0x1, r0) 22:58:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) 22:58:06 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="01"], 0x2, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/232}, 0xf0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 22:58:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @broadcast}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x11}}]}, 0x40}}, 0x0) [ 1961.035996][T14783] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1961.048478][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1961.236573][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) 22:58:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1961.361319][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 22:58:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x900300}, {0x4c}, {0x6}]}) 22:58:06 executing program 4: unshare(0x4060600) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80105014, 0x0) [ 1961.505462][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 22:58:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) [ 1961.663786][T14804] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1961.732456][ T28] audit: type=1326 audit(1600210687.166:1463): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14805 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:07 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fstatfs(r0, &(0x7f0000000080)=""/177) [ 1961.799569][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:58:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) 22:58:07 executing program 4: unshare(0x4060600) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80105014, 0x0) 22:58:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) 22:58:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) [ 1962.363384][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1962.391631][T14828] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) [ 1962.526030][ C1] sd 0:0:1:0: [sg0] tag#2796 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1962.536665][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB: Test Unit Ready [ 1962.543312][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.553204][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.563094][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.572949][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.582772][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.592609][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.602440][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.612372][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.622307][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.632269][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.642136][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.651984][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.661832][ C1] sd 0:0:1:0: [sg0] tag#2796 CDB[c0]: 00 00 00 00 00 00 00 00 22:58:08 executing program 4: unshare(0x4060600) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80105014, 0x0) 22:58:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1962.712162][T14835] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1962.737264][T14837] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 22:58:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00000}, {0x4c}, {0x6}]}) 22:58:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000180), 0x492492492492642, 0x0) [ 1962.918465][T14846] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 22:58:08 executing program 4: unshare(0x4060600) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80105014, 0x0) 22:58:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2a000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) [ 1963.187442][ T28] audit: type=1326 audit(1600210688.626:1464): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14848 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1963.215973][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1963.233189][ C0] sd 0:0:1:0: [sg0] tag#2798 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.243978][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB: Test Unit Ready [ 1963.250668][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.260573][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.270438][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.280363][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.290244][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.295256][ C1] sd 0:0:1:0: [sg0] tag#2797 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1963.300093][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.310515][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB: Test Unit Ready [ 1963.320284][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.326826][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.336507][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.346238][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.355920][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.365647][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.375335][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.385043][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.394724][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.404439][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.414119][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.423977][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.433584][ C0] sd 0:0:1:0: [sg0] tag#2798 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1963.443298][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.460571][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.470436][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.480330][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.490217][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.500111][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1963.510002][ C1] sd 0:0:1:0: [sg0] tag#2797 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1963.533931][T14861] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1963.585151][T14863] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 22:58:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2a010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1963.986432][ T28] audit: type=1326 audit(1600210689.426:1465): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14848 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1964.118073][T14873] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1964.193283][T14877] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1964.212888][T14878] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 22:58:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 22:58:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00100}, {0x4c}, {0x6}]}) 22:58:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2a020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1964.298538][ C0] sd 0:0:1:0: [sg0] tag#2799 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.309414][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB: Test Unit Ready [ 1964.316284][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.326180][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.336125][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.346089][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.356071][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.366146][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.376085][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.386009][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:58:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) [ 1964.395970][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.406017][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.415960][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.425948][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.435891][ C0] sd 0:0:1:0: [sg0] tag#2799 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1964.493040][T14880] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1964.581860][ C1] sd 0:0:1:0: [sg0] tag#2800 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.592489][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB: Test Unit Ready [ 1964.599225][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.609138][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.619068][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.628945][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.638809][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.648689][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.658548][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.668459][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:58:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 22:58:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7d, 0x92, 0x7f, 0x40, 0x1209, 0x2323, 0xc348, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0x45, 0x8a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, "36b75ca2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:58:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) [ 1964.678391][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.688391][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.698286][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.708153][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.718072][ C1] sd 0:0:1:0: [sg0] tag#2800 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1964.763061][ T28] audit: type=1326 audit(1600210690.196:1466): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14881 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2a030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1964.897321][ C0] sd 0:0:1:0: [sg0] tag#2802 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.908285][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB: Test Unit Ready [ 1964.915077][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.924940][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.934830][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.944166][T14893] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1964.944667][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.962523][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.972490][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.982346][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1964.992199][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.002058][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.011941][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.013787][T14896] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1965.021782][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.039561][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.049466][ C0] sd 0:0:1:0: [sg0] tag#2802 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1965.184922][T14901] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1965.187168][T14902] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) [ 1965.385401][ T28] audit: type=1326 audit(1600210690.826:1467): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14881 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 22:58:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2b000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') eventfd2(0x3e8, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5603, 0x4220}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8001}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_MASTER={0x8}]}, 0xbc}}, 0x0) [ 1965.539110][ C1] sd 0:0:1:0: [sg0] tag#2801 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1965.549853][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB: Test Unit Ready [ 1965.556643][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.566507][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.576402][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.586279][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.596155][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.606096][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.615962][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.625836][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:58:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00200}, {0x4c}, {0x6}]}) [ 1965.635657][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.645530][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.655390][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.665259][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.675118][ C1] sd 0:0:1:0: [sg0] tag#2801 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1965.682912][ C1] sd 0:0:1:0: [sg0] tag#2807 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1965.693614][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB: Test Unit Ready [ 1965.700263][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.710130][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.720028][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.729958][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.739850][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.749745][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.759619][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.769505][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.779384][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.789232][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.799099][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.809021][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1965.818999][ C1] sd 0:0:1:0: [sg0] tag#2807 CDB[c0]: 00 00 00 00 00 00 00 00 22:58:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') eventfd2(0x3e8, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5603, 0x4220}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8001}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_MASTER={0x8}]}, 0xbc}}, 0x0) [ 1966.044283][ T28] audit: type=1326 audit(1600210691.476:1468): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14915 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1966.064308][T19846] usb 3-1: new high-speed USB device number 49 using dummy_hcd 22:58:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e0001010000e096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c01005b6454cdd76381e68c380fcdf42270ceb049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea43425e01c7f3cc18486bd725dbffc2a01a1103edc33d9d7c815b6c1b3b8ba057a872cf81e77b857d6b1091b2d200acf3ae815a823cffcf3ff946fa6f26cbe4ed72933ce638487f3361e642bc38195fe"], 0x14f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4256840, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) [ 1966.378910][ C1] sd 0:0:1:0: [sg0] tag#2808 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1966.389691][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB: Test Unit Ready [ 1966.396579][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.406560][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.416527][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.425076][T19846] usb 3-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=c3.48 [ 1966.426557][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.435685][T19846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.445316][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.463115][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.473127][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.483047][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.493034][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.502972][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.512942][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.522872][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.532796][ C1] sd 0:0:1:0: [sg0] tag#2808 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1966.540786][ C1] sd 0:0:1:0: [sg0] tag#2809 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1966.551534][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB: Test Unit Ready [ 1966.558337][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.568339][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.578269][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.588194][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.598161][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.608080][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.618011][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.627915][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.637818][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.647712][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.657593][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1966.667503][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22:58:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2b010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1966.677424][ C1] sd 0:0:1:0: [sg0] tag#2809 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1966.705419][T19846] usb 3-1: config 0 descriptor?? 22:58:12 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2=0x7f000001}}}}}}, 0x0) 22:58:12 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000440)}}], 0x40000000000001a, 0x10021, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000b7fa68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x7530], 0x80}}, 0x0) [ 1967.184233][T19846] gs_usb 3-1:0.0: Configuring for 163 interfaces [ 1967.190962][T19846] gs_usb 3-1:0.0: Driver cannot handle more that 2 CAN interfaces [ 1967.199183][T19846] gs_usb: probe of 3-1:0.0 failed with error -22 [ 1967.389892][ T4012] usb 3-1: USB disconnect, device number 49 [ 1968.203841][ T4012] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1968.594871][ T4012] usb 3-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=c3.48 [ 1968.604318][ T4012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.619882][ T4012] usb 3-1: config 0 descriptor?? 22:58:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7d, 0x92, 0x7f, 0x40, 0x1209, 0x2323, 0xc348, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0x45, 0x8a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, "36b75ca2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:58:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00300}, {0x4c}, {0x6}]}) 22:58:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') eventfd2(0x3e8, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5603, 0x4220}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8001}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_MASTER={0x8}]}, 0xbc}}, 0x0) 22:58:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2b020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:14 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2=0x7f000001}}}}}}, 0x0) 22:58:14 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000440)}}], 0x40000000000001a, 0x10021, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000b7fa68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x7530], 0x80}}, 0x0) [ 1968.819067][ T4012] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 1968.826142][ T4012] gs_usb: probe of 3-1:0.0 failed with error -71 [ 1968.887189][ T4012] usb 3-1: USB disconnect, device number 50 [ 1969.030750][ T28] audit: type=1326 audit(1600210694.466:1469): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14962 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1969.046238][T14971] validate_nla: 6 callbacks suppressed [ 1969.046268][T14971] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:14 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000440)}}], 0x40000000000001a, 0x10021, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000b7fa68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x7530], 0x80}}, 0x0) 22:58:14 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2=0x7f000001}}}}}}, 0x0) 22:58:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2b030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') r1 = socket$inet6(0xa, 0x3, 0x2f) dup(r1) eventfd2(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/if_inet6\x00') eventfd2(0x3e8, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5603, 0x4220}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x70, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1d}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8001}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_MASTER={0x8}]}, 0xbc}}, 0x0) [ 1969.554065][ T4012] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1969.629081][T14985] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:15 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000440)}}], 0x40000000000001a, 0x10021, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000b7fa68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x7530], 0x80}}, 0x0) [ 1969.789915][ T28] audit: type=1326 audit(1600210695.226:1470): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14962 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2c000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1969.975291][ T4012] usb 3-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=c3.48 [ 1969.984620][ T4012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.088322][ T4012] usb 3-1: config 0 descriptor?? [ 1970.190211][T14995] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1970.607304][ T4012] gs_usb 3-1:0.0: Configuring for 163 interfaces [ 1970.614245][ T4012] gs_usb 3-1:0.0: Driver cannot handle more that 2 CAN interfaces [ 1970.622316][ T4012] gs_usb: probe of 3-1:0.0 failed with error -22 [ 1970.814190][ T7708] usb 3-1: USB disconnect, device number 51 22:58:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7d, 0x92, 0x7f, 0x40, 0x1209, 0x2323, 0xc348, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0x45, 0x8a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, "36b75ca2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:58:16 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2=0x7f000001}}}}}}, 0x0) 22:58:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00400}, {0x4c}, {0x6}]}) 22:58:16 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054ad8720600404008ae2000000011b0281f8c0"], 0x0) 22:58:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2c010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:16 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) io_setup(0x20000000002, &(0x7f0000000440)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000480)="1c", 0x1}]) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) [ 1971.396034][T15008] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1971.481429][ T28] audit: type=1326 audit(1600210696.916:1471): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15012 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2c020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:17 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}}], 0x1, 0x0) [ 1971.733496][ T7708] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1971.800463][T15028] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1971.833490][T19846] usb 3-1: new high-speed USB device number 52 using dummy_hcd 22:58:17 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) io_setup(0x20000000002, &(0x7f0000000440)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000480)="1c", 0x1}]) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) 22:58:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2c030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:17 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0x0, 0x10}, 0x18) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {r1, r2/1000+10000}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x63) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val, {@ipv6}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) [ 1971.984217][ T7708] usb 6-1: Using ep0 maxpacket: 32 [ 1972.076405][T15033] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1972.105096][ T7708] usb 6-1: config index 0 descriptor too short (expected 63617, got 27) [ 1972.114044][ T7708] usb 6-1: config 0 has too many interfaces: 192, using maximum allowed: 32 [ 1972.122917][ T7708] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 192 [ 1972.132580][ T7708] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=e2.8a [ 1972.141991][ T7708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.245959][T19846] usb 3-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=c3.48 [ 1972.255489][T19846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.297790][ T28] audit: type=1326 audit(1600210697.727:1472): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15012 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1972.304709][T19846] usb 3-1: config 0 descriptor?? 22:58:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2d000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1972.428845][ T7708] usb 6-1: config 0 descriptor?? [ 1972.705496][ T7708] usb 6-1: USB disconnect, device number 78 [ 1972.846677][T19846] gs_usb 3-1:0.0: Configuring for 163 interfaces [ 1972.853453][T19846] gs_usb 3-1:0.0: Driver cannot handle more that 2 CAN interfaces [ 1972.861568][T19846] gs_usb: probe of 3-1:0.0 failed with error -22 [ 1973.090889][T19846] usb 3-1: USB disconnect, device number 52 [ 1973.513477][ T7708] usb 6-1: new high-speed USB device number 79 using dummy_hcd 22:58:19 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7d, 0x92, 0x7f, 0x40, 0x1209, 0x2323, 0xc348, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0x45, 0x8a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, "36b75ca2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:58:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00500}, {0x4c}, {0x6}]}) 22:58:19 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) io_setup(0x20000000002, &(0x7f0000000440)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000480)="1c", 0x1}]) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) [ 1973.725610][ T28] audit: type=1326 audit(1600210699.167:1473): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15067 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1973.754345][ T7708] usb 6-1: Using ep0 maxpacket: 32 [ 1973.873780][ T7708] usb 6-1: config index 0 descriptor too short (expected 63617, got 27) [ 1973.882423][ T7708] usb 6-1: config 0 has too many interfaces: 192, using maximum allowed: 32 [ 1973.891591][ T7708] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 192 [ 1973.901131][ T7708] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=e2.8a [ 1973.910450][ T7708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.936675][ T7708] usb 6-1: config 0 descriptor?? [ 1974.003752][T19846] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1974.185886][ T7708] usb 6-1: USB disconnect, device number 79 22:58:19 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054ad8720600404008ae2000000011b0281f8c0"], 0x0) 22:58:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2d010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80805659, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0x80805659, 0x0) dup2(r2, r3) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 22:58:19 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) io_setup(0x20000000002, &(0x7f0000000440)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000480)="1c", 0x1}]) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) [ 1974.365568][T19846] usb 3-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=c3.48 [ 1974.374993][T19846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.437759][T15090] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1974.450127][T15089] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1974.510761][T19846] usb 3-1: config 0 descriptor?? [ 1974.517573][T15092] input: syz1 as /devices/virtual/input/input64 [ 1974.539651][ T28] audit: type=1326 audit(1600210699.967:1474): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15067 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1974.648080][T15101] input: syz1 as /devices/virtual/input/input65 22:58:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2d020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:20 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00600}, {0x4c}, {0x6}]}) 22:58:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80805659, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0x80805659, 0x0) dup2(r2, r3) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) [ 1974.948241][T15114] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80805659, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0x80805659, 0x0) dup2(r2, r3) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) [ 1975.007420][T19846] gs_usb 3-1:0.0: Configuring for 163 interfaces [ 1975.014209][T19846] gs_usb 3-1:0.0: Driver cannot handle more that 2 CAN interfaces [ 1975.022275][T19846] gs_usb: probe of 3-1:0.0 failed with error -22 [ 1975.131743][ T28] audit: type=1326 audit(1600210700.557:1475): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1975.152815][ T27] usb 6-1: new high-speed USB device number 80 using dummy_hcd 22:58:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2d030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1975.246875][ T7708] usb 3-1: USB disconnect, device number 53 [ 1975.322808][T15122] input: syz1 as /devices/virtual/input/input66 [ 1975.404611][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 1975.420965][T15128] input: syz1 as /devices/virtual/input/input67 [ 1975.507492][T15137] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1975.557792][ T27] usb 6-1: config index 0 descriptor too short (expected 63617, got 27) [ 1975.566495][ T27] usb 6-1: config 0 has too many interfaces: 192, using maximum allowed: 32 [ 1975.575670][ T27] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 192 [ 1975.585139][ T27] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=e2.8a [ 1975.594494][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.765873][ T27] usb 6-1: config 0 descriptor?? 22:58:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80805659, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0x80805659, 0x0) dup2(r2, r3) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 22:58:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80805659, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0x80805659, 0x0) dup2(r2, r3) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 22:58:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2e000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1975.926261][ T28] audit: type=1326 audit(1600210701.347:1476): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1976.032690][ T27] usb 6-1: USB disconnect, device number 80 [ 1976.152333][T15151] input: syz1 as /devices/virtual/input/input68 [ 1976.165942][T15150] input: syz1 as /devices/virtual/input/input69 22:58:22 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054ad8720600404008ae2000000011b0281f8c0"], 0x0) 22:58:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00700}, {0x4c}, {0x6}]}) 22:58:22 executing program 2: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe"], 0x3}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0xa0202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x21, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 22:58:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80805659, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0x80805659, 0x0) dup2(r2, r3) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 22:58:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8001}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80805659, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0x80805659, 0x0) dup2(r2, r3) sendto$inet(r1, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 22:58:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2e010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1976.822528][T15165] input: syz1 as /devices/virtual/input/input70 [ 1976.843991][T15171] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1976.931099][ T28] audit: type=1326 audit(1600210702.357:1477): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15170 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1976.990900][T15175] input: syz1 as /devices/virtual/input/input71 22:58:22 executing program 2: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe"], 0x3}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0xa0202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x21, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 22:58:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2e020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1977.293117][T19846] usb 6-1: new high-speed USB device number 81 using dummy_hcd 22:58:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0314f9f407000904008100000000020001000200000800040001380000", 0x24) 22:58:22 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) [ 1977.398686][T15188] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1977.533997][T19846] usb 6-1: Using ep0 maxpacket: 32 22:58:23 executing program 2: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe"], 0x3}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0xa0202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x21, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 1977.654250][T19846] usb 6-1: config index 0 descriptor too short (expected 63617, got 27) [ 1977.662870][T19846] usb 6-1: config 0 has too many interfaces: 192, using maximum allowed: 32 [ 1977.671868][T19846] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 192 [ 1977.681263][T19846] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=e2.8a [ 1977.690509][T19846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.725233][ T28] audit: type=1326 audit(1600210703.157:1478): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15170 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2e030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1977.971798][T19846] usb 6-1: config 0 descriptor?? [ 1978.046910][T15204] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1978.224478][T19846] usb 6-1: USB disconnect, device number 81 22:58:24 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054ad8720600404008ae2000000011b0281f8c0"], 0x0) 22:58:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) 22:58:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0314f9f407000904008100000000020001000200000800040001380000", 0x24) 22:58:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00800}, {0x4c}, {0x6}]}) 22:58:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2f000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:24 executing program 2: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="054a38", @ANYRES16, @ANYBLOB="6ffe"], 0x3}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0xa0202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x21, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 1978.925036][T15213] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1978.965269][ T28] audit: type=1326 audit(1600210704.397:1479): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15212 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) 22:58:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2f010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0314f9f407000904008100000000020001000200000800040001380000", 0x24) 22:58:24 executing program 2: r0 = memfd_create(&(0x7f0000000240)='zDN\xf8){\x86\x87T<\xf6i\xbe{\x14\x10\x1f\xa6J\xa3W\x03\xe3 <\t\xe9\xd2\t%\xdctr\xc65\xba\xcc\x84^\x15\x1dDR\x8c\xaf^\r\xc0V\xf5=\xf1W\x1aF\xcaX\x87\x8c\a\x8a]G5\xf8L\r\xa2\xc8\x90\xc2(hW\\\x96\xd6\xa2~%\x06\x95R\xcd\v\xd7\x98=3b1\xb30x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) [ 1980.904175][ T28] audit: type=1326 audit(1600210706.337:1480): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15250 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1980.917562][T15258] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a78302206d040e0a4a4600000001090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1980.957915][T15256] team0: Caught tx_queue_len zero misconfig 22:58:26 executing program 2: r0 = memfd_create(&(0x7f0000000240)='zDN\xf8){\x86\x87T<\xf6i\xbe{\x14\x10\x1f\xa6J\xa3W\x03\xe3 <\t\xe9\xd2\t%\xdctr\xc65\xba\xcc\x84^\x15\x1dDR\x8c\xaf^\r\xc0V\xf5=\xf1W\x1aF\xcaX\x87\x8c\a\x8a]G5\xf8L\r\xa2\xc8\x90\xc2(hW\\\x96\xd6\xa2~%\x06\x95R\xcd\v\xd7\x98=3b1\xb30x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 22:58:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x30000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1981.449127][T15273] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1981.458566][ T9928] usb 6-1: new high-speed USB device number 83 using dummy_hcd 22:58:27 executing program 2: r0 = memfd_create(&(0x7f0000000240)='zDN\xf8){\x86\x87T<\xf6i\xbe{\x14\x10\x1f\xa6J\xa3W\x03\xe3 <\t\xe9\xd2\t%\xdctr\xc65\xba\xcc\x84^\x15\x1dDR\x8c\xaf^\r\xc0V\xf5=\xf1W\x1aF\xcaX\x87\x8c\a\x8a]G5\xf8L\r\xa2\xc8\x90\xc2(hW\\\x96\xd6\xa2~%\x06\x95R\xcd\v\xd7\x98=3b1\xb30x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 22:58:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x30010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00a00}, {0x4c}, {0x6}]}) [ 1981.883815][ T9928] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=46.4a [ 1981.893181][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.990864][ T9928] usb 6-1: config 0 descriptor?? [ 1982.125251][ T28] audit: type=1326 audit(1600210707.557:1482): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15284 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:27 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000001c0)={0x5, 0x7ff}) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) [ 1982.174885][T15288] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x3c, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x2}]}, 0x78) [ 1982.903094][ T9928] video4linux radio32: keene_cmd_main failed (-71) [ 1982.909921][ T9928] radio-keene 6-1:0.0: V4L2 device registered as radio32 [ 1982.946580][ T28] audit: type=1326 audit(1600210708.377:1483): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15284 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1982.999035][ T9928] usb 6-1: USB disconnect, device number 83 [ 1983.672658][ T9928] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1983.922702][ T9928] usb 6-1: Using ep0 maxpacket: 32 [ 1984.053400][ T9928] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=46.4a [ 1984.062689][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.073378][ T9928] usb 6-1: config 0 descriptor?? 22:58:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a78302206d040e0a4a4600000001090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 22:58:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x30020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 22:58:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x3c, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x2}]}, 0x78) 22:58:29 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000001c0)={0x5, 0x7ff}) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 22:58:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00b00}, {0x4c}, {0x6}]}) [ 1984.332725][ T9928] (null): keene_cmd_main failed (-71) [ 1984.413242][ T9928] video4linux radio32: keene_cmd_main failed (-71) [ 1984.419967][ T9928] radio-keene 6-1:0.0: V4L2 device registered as radio32 [ 1984.437909][T15322] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1984.456489][ T28] audit: type=1326 audit(1600210709.887:1484): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15319 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1984.529779][ T9928] usb 6-1: USB disconnect, device number 84 22:58:30 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000001c0)={0x5, 0x7ff}) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 22:58:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x30030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x10, &(0x7f0000000000), 0x20a1562f) 22:58:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x100000001}]}) [ 1985.008591][T15341] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:30 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000001c0)={0x5, 0x7ff}) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) [ 1985.193257][ T9928] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1985.240111][ T28] audit: type=1326 audit(1600210710.667:1485): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15319 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x31000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1985.432831][ T9928] usb 6-1: Using ep0 maxpacket: 32 [ 1985.564246][ T9928] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=46.4a [ 1985.564271][T15357] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1985.581698][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.729552][ T9928] usb 6-1: config 0 descriptor?? [ 1986.655662][ T9928] video4linux radio32: keene_cmd_main failed (-71) [ 1986.662620][ T9928] radio-keene 6-1:0.0: V4L2 device registered as radio32 [ 1986.681330][ T9928] usb 6-1: USB disconnect, device number 85 22:58:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a78302206d040e0a4a4600000001090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 22:58:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x10, &(0x7f0000000000), 0x20a1562f) 22:58:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00c00}, {0x4c}, {0x6}]}) 22:58:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x31010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x100000001}]}) 22:58:32 executing program 2: open_tree(0xffffffffffffffff, 0x0, 0x0) [ 1987.207859][ T28] audit: type=1326 audit(1600210712.637:1486): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15378 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1987.286886][T15384] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 22:58:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x31020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x10, &(0x7f0000000000), 0x20a1562f) 22:58:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x100000001}]}) [ 1987.695390][ T9928] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1987.764187][T15401] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1987.942508][ T9928] usb 6-1: Using ep0 maxpacket: 32 22:58:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x10, &(0x7f0000000000), 0x20a1562f) [ 1988.029624][ T28] audit: type=1326 audit(1600210713.457:1487): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15378 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x31030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1988.093586][ T9928] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=46.4a [ 1988.102990][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.202188][ T9928] usb 6-1: config 0 descriptor?? [ 1988.366786][T15418] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1989.105446][ T9928] video4linux radio32: keene_cmd_main failed (-71) [ 1989.112189][ T9928] radio-keene 6-1:0.0: V4L2 device registered as radio32 [ 1989.134796][ T9928] usb 6-1: USB disconnect, device number 86 22:58:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a78302206d040e0a4a4600000001090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 22:58:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00d00}, {0x4c}, {0x6}]}) 22:58:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x100000001}]}) 22:58:35 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f0000000080)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x82a) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 22:58:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x32000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 1989.753100][ T28] audit: type=1326 audit(1600210715.188:1488): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15438 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1989.806389][T15447] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x32010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:35 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) [ 1990.086345][T11149] usb 6-1: new high-speed USB device number 87 using dummy_hcd 22:58:35 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f0000000080)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x82a) creat(&(0x7f00000001c0)='./file0\x00', 0x0) [ 1990.288602][T15458] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1990.332779][T11149] usb 6-1: Using ep0 maxpacket: 32 [ 1990.453298][T11149] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=46.4a [ 1990.462804][T11149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.511006][T11149] usb 6-1: config 0 descriptor?? [ 1990.528769][ T28] audit: type=1326 audit(1600210715.958:1489): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15438 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x32020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x1c, 0x2, [@TCA_ROUTE4_ACT={0x18, 0x6, [@m_xt={0x14, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x4c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:58:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 1990.856800][T15470] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1990.926643][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1991.097772][T15482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1991.432347][T11149] video4linux radio32: keene_cmd_main failed (-71) [ 1991.439391][T11149] radio-keene 6-1:0.0: V4L2 device registered as radio32 [ 1991.481042][T11149] usb 6-1: USB disconnect, device number 87 22:58:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xa00e00}, {0x4c}, {0x6}]}) 22:58:37 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f0000000080)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x82a) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 22:58:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x32030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x1c, 0x2, [@TCA_ROUTE4_ACT={0x18, 0x6, [@m_xt={0x14, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x4c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:58:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 1992.080606][ T28] audit: type=1326 audit(1600210717.508:1490): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15495 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') lseek(r2, 0x4c, 0x0) lseek(r2, 0x4c, 0x0) [ 1992.170522][T15504] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1992.187312][T15505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:58:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x33000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:37 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f0000000080)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x82a) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 22:58:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') lseek(r2, 0x4c, 0x0) lseek(r2, 0x4c, 0x0) 22:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x1c, 0x2, [@TCA_ROUTE4_ACT={0x18, 0x6, [@m_xt={0x14, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x4c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1992.694854][T15518] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1992.816411][T15525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:58:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x33010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') lseek(r2, 0x4c, 0x0) lseek(r2, 0x4c, 0x0) 22:58:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xb00000}, {0x4c}, {0x6}]}) 22:58:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b63, 0x0) 22:58:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x1, 0x6, 0x81}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000011001d0f9efb433c0000000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/12], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x20) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 22:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x1c, 0x2, [@TCA_ROUTE4_ACT={0x18, 0x6, [@m_xt={0x14, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x4c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 1993.326996][T15534] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1993.367127][ T28] audit: type=1326 audit(1600210718.798:1491): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15538 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1993.388201][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1993.449132][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:58:39 executing program 3: r0 = socket$inet(0x2, 0x803, 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) 22:58:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') lseek(r2, 0x4c, 0x0) lseek(r2, 0x4c, 0x0) 22:58:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x33020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1993.541243][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1993.646498][T15554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1993.717051][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1993.837925][T15564] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x1, 0x6, 0x81}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000011001d0f9efb433c0000000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/12], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x20) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 22:58:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:58:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x33030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1994.186366][ T28] audit: type=1326 audit(1600210719.618:1492): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15538 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:39 executing program 3: r0 = socket$inet(0x2, 0x803, 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) 22:58:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x5a}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) [ 1994.314037][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:58:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xb00100}, {0x4c}, {0x6}]}) [ 1994.470354][T15582] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:58:40 executing program 3: r0 = socket$inet(0x2, 0x803, 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) [ 1994.716324][ T28] audit: type=1326 audit(1600210720.148:1493): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15587 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x5a}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 22:58:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x1, 0x6, 0x81}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000011001d0f9efb433c0000000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/12], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x20) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 22:58:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x34000000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1995.085117][T15600] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:58:40 executing program 3: r0 = socket$inet(0x2, 0x803, 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) 22:58:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x5a}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 22:58:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x34010000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) 22:58:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x1, 0x6, 0x81}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000011001d0f9efb433c0000000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/12], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x20) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 1995.506909][ T28] audit: type=1326 audit(1600210720.938:1494): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15587 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 22:58:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xb00200}, {0x4c}, {0x6}]}) [ 1995.668154][T15613] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:58:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:58:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x5a}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 22:58:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x34020000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1995.972601][ T28] audit: type=1326 audit(1600210721.398:1495): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15621 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x46043a code=0x0 [ 1996.263895][T15629] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 22:58:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:58:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{&(0x7f0000000000)=@tipc, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/130}, {&(0x7f00000001c0)=""/185}, {&(0x7f0000000280)=""/246}, {&(0x7f0000000380)=""/112}, {&(0x7f0000000400)=""/37}, {&(0x7f0000000440)=""/6}], 0x0, &(0x7f0000000500)=""/154}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/42}, {&(0x7f0000000600)=""/198}, {&(0x7f0000000700)=""/125}, {&(0x7f0000000780)=""/13}, {&(0x7f00000007c0)=""/228}, {&(0x7f00000008c0)=""/235}, {&(0x7f00000009c0)=""/112}, {&(0x7f0000000a40)=""/4}], 0x0, &(0x7f0000000b00)=""/128}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000b80)=""/83}, {&(0x7f0000000c00)=""/40}, {&(0x7f0000000c40)=""/222}, {&(0x7f0000000d40)=""/123}, {&(0x7f0000000e00)=""/210}, {&(0x7f0000000f00)=""/39}, {&(0x7f0000000f40)=""/79}, {&(0x7f0000000fc0)=""/252}, {&(0x7f00000010c0)=""/45}, {&(0x7f0000001100)=""/181}], 0x0, &(0x7f0000001280)=""/202}}, {{&(0x7f0000001380)=@nfc, 0x0, &(0x7f0000001780)=[{&(0x7f0000001400)=""/175}, {&(0x7f00000014c0)=""/152}, {&(0x7f0000001580)=""/18}, {&(0x7f00000015c0)=""/110}, {&(0x7f0000001640)=""/23}, {&(0x7f0000001680)=""/191}, {&(0x7f0000001740)}], 0x0, &(0x7f0000001800)=""/23}}], 0x1, 0x0, 0x0) 22:58:41 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) socket(0x10, 0x80002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) pipe(&(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 22:58:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x34030000, &(0x7f0000000080)=[{&(0x7f0000000280)="d80000001e008105e000000000000000001d65ef0b007c05e8fe55a10a0012000200142603000e120800090000000001a80008000b000000e558f06efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930df01523252f10b396b18730d16a43e4f6d0200003f5aeb5edbb57a5081d0ca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3ce81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300382bb05270ca1443867ba43ec6609e637ae627704d", 0xd8}], 0x1}, 0x0) [ 1996.689519][T15635] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1996.700140][T15638] ===================================================== [ 1996.714778][T15638] BUG: KMSAN: uninit-value in xa_load+0xa59/0xa90 [ 1996.721334][T15638] CPU: 1 PID: 15638 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 1996.730013][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.740082][T15638] Call Trace: [ 1996.743387][T15638] dump_stack+0x21c/0x280 [ 1996.747723][T15638] kmsan_report+0xf7/0x1e0 [ 1996.752147][T15638] __msan_warning+0x58/0xa0 [ 1996.756654][T15638] xa_load+0xa59/0xa90 [ 1996.760801][T15638] ucma_get_ctx+0x82/0x3b0 [ 1996.765329][T15638] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1996.771132][T15638] ucma_accept+0x29a/0xe40 [ 1996.775555][T15638] ? kmsan_get_metadata+0x116/0x180 [ 1996.780757][T15638] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1996.786566][T15638] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1996.792631][T15638] ? kmsan_get_metadata+0xb0/0x180 [ 1996.797742][T15638] ? kmsan_set_origin_checked+0x95/0xf0 [ 1996.803285][T15638] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1996.809454][T15638] ? _copy_from_user+0x221/0x330 [ 1996.814397][T15638] ? kmsan_get_metadata+0x116/0x180 [ 1996.819603][T15638] ucma_write+0x64d/0x6e0 [ 1996.823936][T15638] ? ucma_get_global_nl_info+0xe0/0xe0 [ 1996.829391][T15638] do_iter_write+0x9b1/0x1020 [ 1996.834090][T15638] do_writev+0x4cc/0xa30 [ 1996.838348][T15638] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1996.844160][T15638] ? kmsan_get_metadata+0x116/0x180 [ 1996.849356][T15638] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1996.855167][T15638] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1996.861321][T15638] __se_sys_writev+0x9b/0xb0 [ 1996.865913][T15638] __x64_sys_writev+0x4a/0x70 [ 1996.870592][T15638] do_syscall_64+0xad/0x160 [ 1996.875263][T15638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1996.881186][T15638] RIP: 0033:0x45d5f9 [ 1996.885484][T15638] Code: Bad RIP value. [ 1996.889599][T15638] RSP: 002b:00007f74ae529c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1996.898149][T15638] RAX: ffffffffffffffda RBX: 0000000000039c40 RCX: 000000000045d5f9 [ 1996.906123][T15638] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1996.914093][T15638] RBP: 000000000118d0c0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.922060][T15638] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118d08c [ 1996.930031][T15638] R13: 000000000169fb6f R14: 00007f74ae52a9c0 R15: 000000000118d08c [ 1996.938018][T15638] [ 1996.940340][T15638] Local variable ----cmd@ucma_accept created at: [ 1996.946669][T15638] ucma_accept+0x91/0xe40 [ 1996.951078][T15638] ucma_accept+0x91/0xe40 [ 1996.955394][T15638] ===================================================== [ 1996.962319][T15638] Disabling lock debugging due to kernel taint [ 1996.968507][T15638] Kernel panic - not syncing: panic_on_warn set ... [ 1996.975099][T15638] CPU: 1 PID: 15638 Comm: syz-executor.2 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1996.985153][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.995201][T15638] Call Trace: [ 1996.998499][T15638] dump_stack+0x21c/0x280 [ 1997.002830][T15638] panic+0x4d7/0xef7 [ 1997.006747][T15638] ? add_taint+0x17c/0x210 [ 1997.011162][T15638] kmsan_report+0x1df/0x1e0 [ 1997.015682][T15638] __msan_warning+0x58/0xa0 [ 1997.020187][T15638] xa_load+0xa59/0xa90 [ 1997.024262][T15638] ucma_get_ctx+0x82/0x3b0 [ 1997.028683][T15638] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1997.034513][T15638] ucma_accept+0x29a/0xe40 [ 1997.038937][T15638] ? kmsan_get_metadata+0x116/0x180 [ 1997.044142][T15638] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1997.049946][T15638] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1997.056105][T15638] ? kmsan_get_metadata+0xb0/0x180 [ 1997.061309][T15638] ? kmsan_set_origin_checked+0x95/0xf0 [ 1997.066860][T15638] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1997.072931][T15638] ? _copy_from_user+0x221/0x330 [ 1997.077915][T15638] ? kmsan_get_metadata+0x116/0x180 [ 1997.083116][T15638] ucma_write+0x64d/0x6e0 [ 1997.087450][T15638] ? ucma_get_global_nl_info+0xe0/0xe0 [ 1997.092909][T15638] do_iter_write+0x9b1/0x1020 [ 1997.097605][T15638] do_writev+0x4cc/0xa30 [ 1997.101857][T15638] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1997.107661][T15638] ? kmsan_get_metadata+0x116/0x180 [ 1997.112872][T15638] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1997.118687][T15638] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1997.124844][T15638] __se_sys_writev+0x9b/0xb0 [ 1997.129445][T15638] __x64_sys_writev+0x4a/0x70 [ 1997.134129][T15638] do_syscall_64+0xad/0x160 [ 1997.138637][T15638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1997.144529][T15638] RIP: 0033:0x45d5f9 [ 1997.148413][T15638] Code: Bad RIP value. [ 1997.152475][T15638] RSP: 002b:00007f74ae529c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1997.160902][T15638] RAX: ffffffffffffffda RBX: 0000000000039c40 RCX: 000000000045d5f9 [ 1997.169050][T15638] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1997.177020][T15638] RBP: 000000000118d0c0 R08: 0000000000000000 R09: 0000000000000000 [ 1997.184985][T15638] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118d08c [ 1997.193045][T15638] R13: 000000000169fb6f R14: 00007f74ae52a9c0 R15: 000000000118d08c [ 1997.202468][T15638] Kernel Offset: disabled [ 1997.206793][T15638] Rebooting in 86400 seconds..