bdfc5271473a9cd30cd2a2b4a27f56f931d61126a2987d0deb68e068eeae9e44721b41f6b63f5d3a04fbe194ad498d6ad031bf5df7a3cff494b0ad058e6eb627b7541a6d", 0xc0, 0x1f}, {&(0x7f0000000e00)="96c30d4cfbcfd0fdc6f4724f953e51bc58b73a52fb3bafd49a96cd70d6027a347d4e87c72fce5b9ad07b3893562dd160749996f4ca2e114feb36f0877689b6400213982f1da3dae39e3544ed", 0x4c, 0x100000000}, {&(0x7f0000000e80)="d23c20cee9d277c0e273489d", 0xc, 0x7}, {&(0x7f0000000ec0)="4a84957eeb09adb2ad9fec3f49374540cdbf60ab2359de94e01b91e19b7b0d5a8d14bc55071b664c186b28e763476b51875c42582d325310b5a1259a2870ecf60be22f5f436800c08fc0ced8c3f0a71552b96eeb6494ef6ad11b9121984d4d1df14e32039855957a1e5ef8bafc2297be43629daa293f3acd1bb52d503f20", 0x7e, 0x200}, {&(0x7f0000000f40)="10fce4f0ea066a0827d28afb31ce41312490e026c37e5d234e0a18ba519de5c6a4997c6f0ca4645bfee8eee61e7021aa58020e2c47949e5e73cf9df079c637d9e3e2b7c17b29616d9ff50ce6dd3f523a5b1a0a32c71e604b5a81258d91a000c417bb2de69ba3b088baf078616a34a956818a79dc156c0be83b0dd44000a8fac43a90a58027862e82d43cc15d5a3f808185bbad", 0x93, 0x8}, {&(0x7f0000001000)="b28597addd53fec08707c4d65c588de8bcdc891f7480d548212fdcc65d65fc329f74c05ed1bb695be4326732274cf9eae6a472fa7fbfe471831454a256b8e56504a60ccee9ff90286ccd04a59da01d575f0c34ab4eaa2eb3c4cf1111ef2b910c3a3be7d1b6143654381c8c2989f974de7813c71b99b2898ca4387f78b150449355c05ec721bd4739d79d2316f0a55deadd248df4518745fb93ad461ecb06f47bf6d94fffd90f59f6468148888a549ed00aa2eb5b5be523704c88f23a8759116fe9a1968b44e1a81242c187e18b", 0xcd, 0x5}, {&(0x7f0000001100)="db4d5adbc97ae26a73ad4eae63c8f7a88666af39c4ccd7501cdf82d1da451602222f4189186db0f6e2c952507554b38811e1f51e51a11303f5588f0dbd39fb21631d551159b62568b03ff6c32caa753fcb20bdeae1cd3caf027d33e6041735a2d219599a2294", 0x66, 0x8d2}, {&(0x7f0000001180)="a8316d835ec35e8ce79686a5c5afc965ac7ddfabb94d6980b2f82d3213b5144f129ac29adbac32597d40b2ee4f93681925c6c9d77ad344fc168004560dd7562f1c5942495b7dfb6f20c7a2fe014124f3b78b8e63cbf93671630d97ac1de1bde289cca6a4f44daa69b68a4a5718a0038e39a62a0e2396c168dd7423a6", 0x7c, 0x4}, {&(0x7f0000001200)="0861378e5c43ae2b9b6b1b6fd7bc697189390540e404da443dc2c20c3a2d80e7d74ad51f46c672963d9581381853df68bd650b6075af90af20c2540c4edc0611f94a9396116482be5f36529406c26cfb005018c0744e4fd9b49b4fdafce57bd983f7f459d5f06a306f2597df1f964caa37c6f73a48983d8a082604bf30660caaff1b4a1b7bfcbce358dbdaa310fd2dec1acd33a76630bf64382b5d5da6b8aa3e67b27e24c5d840e0ea0e9dd588cfe7e2e4cab87290be7a7352630ff139d58f22ad0ae2056c480f6aeafa80d2d5ee00cbc65eb01f5228062ca6a40e0f0df247b3fb", 0xe1, 0x10001}, {&(0x7f0000001300)="518d0b8cb8806a73065f9994489684920072b9a370fb632ab0c04a6151539cba2e3f39c978f88640e0b03fad8842815ccae2909503a249275c1c308962c5226150b65ec2727b7a8591f3ea4cbbed8c17e4811227acd5ae3fae94eac94d60b9c2adb06733ff775e813dce1e6a75f1a700cdded8e86b7e3dc1d7fa4cad73574a24f0b6b5493f56a2fdda5fcd833f1993381c3f658545856e039d4757271b0f654d3d07e15fa896c26ccc40fe444e0c58ac8f62b4f1f34c3ebbe0", 0xb9, 0x81}], 0x20802, &(0x7f00000014c0)={[{@flock_openafs}], [{@euid_lt={'euid<', r5}}, {@smackfshat}, {@smackfsfloor}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x3e}}]}) getsockname$unix(r3, &(0x7f0000000a80)=@abs, &(0x7f0000000c80)=0x6e) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) syz_mount_image$zonefs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000001, 0x4, &(0x7f0000000980)=[{&(0x7f0000000700)="d0380ac8", 0x4, 0x3f}, {&(0x7f0000000740)="b942fe871b8b64c4f653c286b79eb58d2c23f8459f446a5e52c845811865957f660898bb08a5aff12bbc79290e33bc9a3660bd93574f6fc2eddc2a4fd61aceed6e02f54ab659d1f798f9db20aefb5c1b61c31fff8f37076d93d351a4371307027c6b5b05e34329244b844fdf871fa662c7c3dc02feab9bbd38d1d2521d1366832c707ba45187621314c29718ae55dd389ea690d0d3a42ac7c04ef91badf89ce840039162185eab812f333c5e3f5f32ffdfa3ca77a6964ad809eee3568f5cb9b1b86c48540e5a48cb6a71330be5b164e569c7fe3260d4203d2f", 0xd9, 0x40}, {&(0x7f0000000840)="da42ba015c86e8b3c605e2851cd751647d4a55833483163a291c40e783d503524baf262a08b8f2a6b2b73f7834375da4a2d555c810880e401870bd13004e7953cb4c148fb14043ef775ce52916ac022ed96b095597fa19e6f934c6b4ea965828266d1b0ef94df2a5c0017230f6523c816488eac5809191869d4c4fed2587f7666ce8649099e80bb675f76ce975490347b2159e2ed9db76fa7827870bdad3ff3e5ea077899a0d232f4ae421794ee1d9ffd4b7983ea68531b8d3", 0xb9, 0x8}, {&(0x7f0000000900)="5b366154b82c6ff6bf05311855421bba1deab6a50958e6e3c295000c38cd6bee215aab734c317b278f1ab0c39f7b96f109df814e99c618942e7bab64fcd6106a9d8ed102a5b67539eb1e", 0x4a, 0x4d}], 0x5022, &(0x7f0000000a00)=ANY=[@ANYBLOB='explicit-open,errors=zone-ro,errors=zone-offline,uid>', @ANYRESDEC=0xee00, @ANYBLOB="ab10fa3d6a5f000000010000000000004d4c4a4f8b0bb21a52ecf31d"]) 07:49:07 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x1, r0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:07 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1241.040863][T10568] FAULT_INJECTION: forcing a failure. [ 1241.040863][T10568] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1241.063887][T10568] CPU: 0 PID: 10568 Comm: syz-executor.1 Not tainted 5.16.0-rc3-syzkaller #0 [ 1241.072681][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.082731][T10568] Call Trace: [ 1241.086007][T10568] [ 1241.088934][T10568] dump_stack_lvl+0xcd/0x134 [ 1241.093530][T10568] should_fail.cold+0x5/0xa [ 1241.098047][T10568] get_futex_key+0x7c0/0x1590 [ 1241.102731][T10568] ? futex_setup_timer+0xf0/0xf0 [ 1241.107679][T10568] futex_wake+0xe4/0x490 [ 1241.111919][T10568] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1241.117903][T10568] ? futex_wake_mark+0x1a0/0x1a0 [ 1241.122874][T10568] ? find_held_lock+0x2d/0x110 [ 1241.127671][T10568] do_futex+0x25b/0x390 [ 1241.131833][T10568] ? __ia32_sys_get_robust_list+0x420/0x420 [ 1241.137736][T10568] mm_release+0x235/0x2c0 [ 1241.142085][T10568] do_exit+0x9d6/0x2b40 [ 1241.146254][T10568] ? mm_update_next_owner+0x7a0/0x7a0 [ 1241.151891][T10568] ? lock_downgrade+0x6e0/0x6e0 [ 1241.156746][T10568] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1241.163004][T10568] do_group_exit+0x125/0x310 [ 1241.167603][T10568] get_signal+0x47d/0x2220 [ 1241.172029][T10568] arch_do_signal_or_restart+0x2a9/0x1c40 [ 1241.177763][T10568] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1241.183503][T10568] ? ktime_get+0x30b/0x470 [ 1241.187926][T10568] ? lapic_next_event+0x4d/0x80 [ 1241.192786][T10568] ? get_sigframe_size+0x10/0x10 [ 1241.197727][T10568] ? tick_program_event+0xb4/0x140 [ 1241.202866][T10568] exit_to_user_mode_prepare+0x17d/0x290 [ 1241.208780][T10568] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 1241.214854][T10568] irqentry_exit_to_user_mode+0x5/0x40 [ 1241.220521][T10568] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1241.226503][T10568] RIP: 0033:0x7f0cc08deae9 [ 1241.230940][T10568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.250660][T10568] RSP: 002b:00007f0cbde54188 EFLAGS: 00000246 [ 1241.256729][T10568] RAX: 0000000000000000 RBX: 00007f0cc09f1f60 RCX: 00007f0cc08deae9 [ 1241.265483][T10568] RDX: 0000000020000400 RSI: 0000000000000001 RDI: 0000000000000002 [ 1241.273479][T10568] RBP: 00007f0cbde541d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.281449][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.289532][T10568] R13: 00007ffc1c0b306f R14: 00007f0cbde54300 R15: 0000000000022000 [ 1241.297714][T10568] 07:49:08 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000140)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:08 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 1241.565708][ T26] audit: type=1804 audit(1638517748.306:432): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/459/bus" dev="sda1" ino=15214 res=1 errno=0 07:49:08 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1241.728570][T10639] FAULT_INJECTION: forcing a failure. [ 1241.728570][T10639] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1241.821193][T10639] CPU: 1 PID: 10639 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0 [ 1241.830002][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.840061][T10639] Call Trace: [ 1241.843949][T10639] [ 1241.846880][T10639] dump_stack_lvl+0xcd/0x134 [ 1241.851500][T10639] should_fail.cold+0x5/0xa [ 1241.856014][T10639] prepare_alloc_pages+0x17b/0x570 [ 1241.861136][T10639] ? io_poll_add.constprop.0+0xf2/0x3f0 [ 1241.866694][T10639] __alloc_pages+0x12f/0x500 [ 1241.871286][T10639] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1241.878109][T10639] ? kmem_cache_alloc_bulk+0x21a/0x720 [ 1241.883579][T10639] alloc_pages+0x1a7/0x300 [ 1241.888004][T10639] new_slab+0x32d/0x4a0 [ 1241.892339][T10639] ___slab_alloc+0x918/0xfe0 [ 1241.896931][T10639] ? io_submit_sqes.cold+0x20b/0x43d [ 1241.902229][T10639] ? mark_held_locks+0x9f/0xe0 [ 1241.907009][T10639] ? kmem_cache_alloc_bulk+0x21a/0x720 [ 1241.912476][T10639] kmem_cache_alloc_bulk+0x21a/0x720 [ 1241.917786][T10639] io_submit_sqes.cold+0x20b/0x43d [ 1241.922923][T10639] ? find_held_lock+0x2d/0x110 [ 1241.927737][T10639] ? io_async_task_func+0x550/0x550 [ 1241.932962][T10639] ? __fget_files+0x23d/0x3e0 [ 1241.937684][T10639] ? __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1241.943626][T10639] __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1241.949371][T10639] ? io_submit_sqes+0x8a20/0x8a20 [ 1241.954407][T10639] ? find_held_lock+0x2d/0x110 [ 1241.959185][T10639] ? __context_tracking_exit+0xb8/0xe0 [ 1241.964829][T10639] ? lock_downgrade+0x6e0/0x6e0 [ 1241.969783][T10639] ? lock_downgrade+0x6e0/0x6e0 [ 1241.974651][T10639] ? syscall_enter_from_user_mode+0x21/0x70 [ 1241.980558][T10639] do_syscall_64+0x35/0xb0 [ 1241.985157][T10639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1241.991060][T10639] RIP: 0033:0x7fd0ace02ae9 [ 1241.995471][T10639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1242.015259][T10639] RSP: 002b:00007fd0aa378188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1242.023676][T10639] RAX: ffffffffffffffda RBX: 00007fd0acf15f60 RCX: 00007fd0ace02ae9 [ 1242.031649][T10639] RDX: 0000000000000000 RSI: 000000000000450d RDI: 0000000000000006 [ 1242.039617][T10639] RBP: 00007fd0aa3781d0 R08: 0000000000000000 R09: 0000000000000000 [ 1242.047585][T10639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.055641][T10639] R13: 00007ffdaf99669f R14: 00007fd0aa378300 R15: 0000000000022000 [ 1242.063649][T10639] 07:49:08 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x35, 0x0, @thr={&(0x7f0000000100)="cadcda44438b", &(0x7f0000000140)="312ae104f0238381125367e484b735498d2bebdd67a045a8d3761c0287e1c827d4da032c571aa2ae738ff862a945b66cdbed"}}, &(0x7f0000000240)) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3e, 0x0, @tid=r1}, &(0x7f0000000380)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x6, 0x0, 0xff, 0x40828, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0xc, 0xffffffffffffffff, 0x8) 07:49:08 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x1, @tid=r1}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) [ 1242.234681][ T26] audit: type=1804 audit(1638517748.996:433): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/460/bus" dev="sda1" ino=15002 res=1 errno=0 07:49:09 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:09 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1242.322339][T10653] loop4: detected capacity change from 0 to 32768 [ 1242.495182][T10666] FAULT_INJECTION: forcing a failure. [ 1242.495182][T10666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1242.584016][T10666] CPU: 1 PID: 10666 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0 [ 1242.592814][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.602865][T10666] Call Trace: [ 1242.606143][T10666] [ 1242.609067][T10666] dump_stack_lvl+0xcd/0x134 [ 1242.613669][T10666] should_fail.cold+0x5/0xa [ 1242.618289][T10666] prepare_alloc_pages+0x17b/0x570 [ 1242.623430][T10666] ? io_poll_add.constprop.0+0xf2/0x3f0 [ 1242.628982][T10666] __alloc_pages+0x12f/0x500 [ 1242.633567][T10666] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1242.640500][T10666] ? kmem_cache_alloc_bulk+0x21a/0x720 [ 1242.646136][T10666] alloc_pages+0x1a7/0x300 [ 1242.650557][T10666] new_slab+0x32d/0x4a0 [ 1242.654712][T10666] ___slab_alloc+0x918/0xfe0 [ 1242.659300][T10666] ? io_submit_sqes.cold+0x20b/0x43d [ 1242.664587][T10666] ? mark_held_locks+0x9f/0xe0 [ 1242.669362][T10666] ? kmem_cache_alloc_bulk+0x21a/0x720 [ 1242.674815][T10666] kmem_cache_alloc_bulk+0x21a/0x720 [ 1242.680102][T10666] io_submit_sqes.cold+0x20b/0x43d [ 1242.685223][T10666] ? find_held_lock+0x2d/0x110 [ 1242.689995][T10666] ? io_async_task_func+0x550/0x550 [ 1242.695203][T10666] ? __fget_files+0x23d/0x3e0 [ 1242.699889][T10666] ? __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1242.705610][T10666] __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1242.711166][T10666] ? io_submit_sqes+0x8a20/0x8a20 [ 1242.716190][T10666] ? find_held_lock+0x2d/0x110 [ 1242.720955][T10666] ? __context_tracking_exit+0xb8/0xe0 [ 1242.726412][T10666] ? lock_downgrade+0x6e0/0x6e0 [ 1242.731261][T10666] ? lock_downgrade+0x6e0/0x6e0 [ 1242.736127][T10666] ? syscall_enter_from_user_mode+0x21/0x70 [ 1242.742026][T10666] do_syscall_64+0x35/0xb0 [ 1242.746444][T10666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1242.752336][T10666] RIP: 0033:0x7fd0ace02ae9 [ 1242.756754][T10666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1242.776358][T10666] RSP: 002b:00007fd0aa378188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1242.784779][T10666] RAX: ffffffffffffffda RBX: 00007fd0acf15f60 RCX: 00007fd0ace02ae9 [ 1242.792744][T10666] RDX: 0000000000000000 RSI: 000000000000450d RDI: 0000000000000006 [ 1242.800713][T10666] RBP: 00007fd0aa3781d0 R08: 0000000000000000 R09: 0000000000000000 [ 1242.808675][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.816640][T10666] R13: 00007ffdaf99669f R14: 00007fd0aa378300 R15: 0000000000022000 [ 1242.824620][T10666] [ 1242.861341][ T26] audit: type=1804 audit(1638517749.616:434): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/461/bus" dev="sda1" ino=15219 res=1 errno=0 07:49:09 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) ppoll(&(0x7f0000000100)=[{r5, 0x22a3}, {r1, 0x24a9}, {r1, 0x4420}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x1]}, 0x8) [ 1243.103572][T10653] BTRFS info (device loop4): disk space caching is enabled [ 1243.136513][T10653] BTRFS info (device loop4): has skinny extents [ 1243.527365][T10653] BTRFS error (device loop4): open_ctree failed 07:49:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f00000004c0)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000040)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000180)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000013900)="111fc0d9", 0x4, 0x571}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = fork() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2b, 0x5, 0x8, 0x5, 0x0, 0xffffffff, 0x8000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x3, 0x6}, 0x10400, 0xfffffffffffff920, 0x9, 0x4, 0x80000000, 0x400, 0xffc0, 0x0, 0x4, 0x0, 0xffff}, r0, 0x7, 0xffffffffffffffff, 0x9) 07:49:10 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 07:49:10 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) wait4(r2, &(0x7f0000000100), 0x40000000, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ptrace$cont(0x7, r2, 0xb36, 0x9) rt_sigqueueinfo(r2, 0x3, &(0x7f0000000140)={0x40, 0x40, 0x6}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:10 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:10 executing program 4: semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x58d8, 0x2000}, {0x0, 0x1, 0x800}], 0x2, &(0x7f0000000400)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_pgetevents(0x0, 0x10001, 0x5, &(0x7f0000000440)=[{}, {}, {}, {}, {}], &(0x7f0000000500), &(0x7f0000000580)={&(0x7f0000000540)={[0x9]}, 0x8}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x400001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ppoll(&(0x7f00000001c0)=[{r3, 0x2000}, {0xffffffffffffffff, 0x4002}, {0xffffffffffffffff, 0x4000}], 0x3, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "a59f7995f969f9"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{r6, 0x0, 0xc4, 0xfffffffffffffff7, 0x80000001, 0x9, 0x368, 0x101, 0x6, 0x10001, 0x8000, 0x0, 0x7, 0x9, 0x100000001}}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) [ 1243.937806][T10728] FAULT_INJECTION: forcing a failure. [ 1243.937806][T10728] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.983780][T10731] hub 9-0:1.0: USB hub found [ 1244.003333][T10733] loop5: detected capacity change from 0 to 4096 [ 1244.006481][T10731] hub 9-0:1.0: 8 ports detected [ 1244.014473][T10728] CPU: 0 PID: 10728 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0 [ 1244.023580][T10728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.033629][T10728] Call Trace: [ 1244.036989][T10728] [ 1244.039918][T10728] dump_stack_lvl+0xcd/0x134 [ 1244.044517][T10728] should_fail.cold+0x5/0xa [ 1244.049030][T10728] should_failslab+0x5/0x10 [ 1244.053539][T10728] kmem_cache_alloc_bulk+0x4b/0x720 [ 1244.058832][T10728] io_submit_sqes.cold+0x20b/0x43d [ 1244.063969][T10728] ? find_held_lock+0x2d/0x110 [ 1244.068826][T10728] ? io_async_task_func+0x550/0x550 [ 1244.074036][T10728] ? __fget_files+0x23d/0x3e0 [ 1244.078725][T10728] ? __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1244.084456][T10728] __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1244.090018][T10728] ? io_submit_sqes+0x8a20/0x8a20 [ 1244.095050][T10728] ? find_held_lock+0x2d/0x110 [ 1244.099817][T10728] ? __context_tracking_exit+0xb8/0xe0 [ 1244.105368][T10728] ? lock_downgrade+0x6e0/0x6e0 [ 1244.110223][T10728] ? lock_downgrade+0x6e0/0x6e0 [ 1244.115087][T10728] ? syscall_enter_from_user_mode+0x21/0x70 [ 1244.120991][T10728] do_syscall_64+0x35/0xb0 [ 1244.125417][T10728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1244.131319][T10728] RIP: 0033:0x7fd0ace02ae9 [ 1244.135731][T10728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1244.155430][T10728] RSP: 002b:00007fd0aa378188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1244.163840][T10728] RAX: ffffffffffffffda RBX: 00007fd0acf15f60 RCX: 00007fd0ace02ae9 [ 1244.171810][T10728] RDX: 0000000000000000 RSI: 000000000000450d RDI: 0000000000000006 07:49:10 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1244.179778][T10728] RBP: 00007fd0aa3781d0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.187742][T10728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.195715][T10728] R13: 00007ffdaf99669f R14: 00007fd0aa378300 R15: 0000000000022000 [ 1244.203697][T10728] [ 1244.210105][ T26] audit: type=1804 audit(1638517750.776:435): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/462/bus" dev="sda1" ino=15228 res=1 errno=0 [ 1244.250873][T10738] hub 9-0:1.0: USB hub found [ 1244.255804][T10738] hub 9-0:1.0: 8 ports detected 07:49:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000604000000000000000000000d00000000000000000100008400000000000000000400000000000000000000000000000b00000000000009de99a3f7d6c3ae4ee8512dadbb01ebbe91eacc9bd77b0e46e0954c9de9637e1876b5c6f6b80245319b2601659f9af089e4e6e0b1fc6224a23e7af83d3d65e74e2ad4f6f68105b38a29650d3c2fa3fad70beb28e4eed08bd2c86ae55368d2b5dd48a69b77a9d7f524b0ab1e825da3537d1632fa47a87368d7"], &(0x7f0000004600)=""/210, 0x56, 0xd2, 0x8}, 0x20) 07:49:11 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x8, 0x9, 0xff, 0x0, 0x0, 0x10000, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1244.309767][T10733] EXT4-fs (loop5): Unrecognized mount option "" or missing value 07:49:11 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0xc, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0xc, &(0x7f00000002c0)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x6, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x401, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x816, 0x0, 0xfffffff8, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) 07:49:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000003a40)=ANY=[@ANYBLOB="6c1000082900020029bd7000ffdbdf250060d8008e9e2ece6850e6ced2986b968f3eaef65188f69dfc0b7be9db6f9d35a78e75b91964a928036f0325065c410e3055d633c2ffcce8c319aa2d85", @ANYRES32=0x0], 0x106c}, 0x1, 0x0, 0x0, 0x4001}, 0xc0) mknod$loop(0x0, 0x20, 0x1) write$UHID_INPUT(r0, &(0x7f0000000980)={0x8, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x1000}}, 0x1006) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000acbf009500000000000000c3e889452570d64754c0f733f97709655d7198"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) creat(&(0x7f0000000300)='./file2\x00', 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180)=0x7fff, 0x7) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000440), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendfile(r0, r0, &(0x7f00000001c0), 0x8080ffffff80) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r5 = dup2(r4, r3) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r2) 07:49:11 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1244.468641][T10751] BPF: (anon) type_id=4 bitfield_size=0 bits_offset=0 [ 1244.508451][T10751] BPF: [ 1244.515424][T10751] BPF:Invalid member [ 1244.524371][T10751] BPF: [ 1244.524371][T10751] [ 1244.553813][T10751] BPF: (anon) type_id=4 bitfield_size=0 bits_offset=0 [ 1244.592536][T10751] BPF: [ 1244.614895][T10751] BPF:Invalid member [ 1244.642466][T10751] BPF: [ 1244.642466][T10751] 07:49:11 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() r3 = fork() ptrace$setopts(0x4206, r3, 0x6, 0x12) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1244.714535][ T26] audit: type=1804 audit(1638517751.476:436): pid=10762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/463/bus" dev="sda1" ino=15229 res=1 errno=0 [ 1244.722549][T10763] FAULT_INJECTION: forcing a failure. [ 1244.722549][T10763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1244.761563][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1245.023565][T10763] CPU: 0 PID: 10763 Comm: syz-executor.2 Not tainted 5.16.0-rc3-syzkaller #0 [ 1245.032481][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1245.042547][T10763] Call Trace: [ 1245.045832][T10763] [ 1245.048765][T10763] dump_stack_lvl+0xcd/0x134 [ 1245.053367][T10763] should_fail.cold+0x5/0xa [ 1245.057889][T10763] prepare_alloc_pages+0x17b/0x570 [ 1245.063018][T10763] ? io_poll_add.constprop.0+0xf2/0x3f0 [ 1245.068664][T10763] __alloc_pages+0x12f/0x500 [ 1245.073266][T10763] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1245.080047][T10763] ? kmem_cache_alloc_bulk+0x21a/0x720 [ 1245.085525][T10763] alloc_pages+0x1a7/0x300 [ 1245.089960][T10763] new_slab+0x32d/0x4a0 [ 1245.094134][T10763] ___slab_alloc+0x918/0xfe0 [ 1245.100318][T10763] ? io_submit_sqes.cold+0x20b/0x43d [ 1245.105628][T10763] ? mark_held_locks+0x9f/0xe0 [ 1245.110425][T10763] ? kmem_cache_alloc_bulk+0x21a/0x720 [ 1245.115896][T10763] kmem_cache_alloc_bulk+0x21a/0x720 [ 1245.121374][T10763] io_submit_sqes.cold+0x20b/0x43d [ 1245.126601][T10763] ? find_held_lock+0x2d/0x110 [ 1245.131419][T10763] ? io_async_task_func+0x550/0x550 [ 1245.136681][T10763] ? __fget_files+0x23d/0x3e0 [ 1245.141412][T10763] ? __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1245.147148][T10763] __do_sys_io_uring_enter+0xf6e/0x1f50 [ 1245.152743][T10763] ? io_submit_sqes+0x8a20/0x8a20 [ 1245.157779][T10763] ? find_held_lock+0x2d/0x110 [ 1245.162558][T10763] ? __context_tracking_exit+0xb8/0xe0 [ 1245.168029][T10763] ? lock_downgrade+0x6e0/0x6e0 [ 1245.172919][T10763] ? lock_downgrade+0x6e0/0x6e0 [ 1245.177964][T10763] ? syscall_enter_from_user_mode+0x21/0x70 [ 1245.183871][T10763] do_syscall_64+0x35/0xb0 [ 1245.188396][T10763] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1245.194303][T10763] RIP: 0033:0x7fd0ace02ae9 [ 1245.198982][T10763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1245.218603][T10763] RSP: 002b:00007fd0aa378188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1245.227031][T10763] RAX: ffffffffffffffda RBX: 00007fd0acf15f60 RCX: 00007fd0ace02ae9 [ 1245.235017][T10763] RDX: 0000000000000000 RSI: 000000000000450d RDI: 0000000000000006 [ 1245.243238][T10763] RBP: 00007fd0aa3781d0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.251254][T10763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.259409][T10763] R13: 00007ffdaf99669f R14: 00007fd0aa378300 R15: 0000000000022000 [ 1245.267404][T10763] 07:49:12 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) io_pgetevents(0x0, 0x7, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)={r2, r3+10000000}, &(0x7f0000000540)={&(0x7f00000003c0)={[0x8]}, 0x8}) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mq_timedreceive(r5, &(0x7f0000000140)=""/81, 0x51, 0x267, &(0x7f0000000240)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x0, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, 0x0, 0x9, 0xffffffffffffffff, 0x8) 07:49:12 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)) fanotify_init(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0, r1+60000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_create(0x5, &(0x7f0000000500)={0x0, 0x8, 0x1, @thr={&(0x7f00000003c0)="cc", &(0x7f0000000440)="953f87e55edcb0167cde1dbfdacad37786d7222dc589b6d5e70b1c938a38bd02c012f7911f740fe3e63205164aeae73b491518febd728c34090f3e77f66651962299f3b2b8ac4f778fb53e2e5c74b2556db80570df5d1b494c89d456ea7bcbf5a4c3fe2d56c63a2ba8dca62f35b559e735c748a73c95699ac9c20252cd49dad85dbc37a3104eac737c4790b61337b165fbf0fed7e78d6cf9544ab0c59f30d7f3da5fcf65016c4d94e83fc577fa2652fc"}}, &(0x7f0000000540)=0x0) timer_settime(r5, 0x1, &(0x7f0000000580)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000005c0)) timer_settime(r2, 0x1, &(0x7f0000000140)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) r6 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000380)) timer_settime(r7, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r6, 0x9, 0xffffffffffffffff, 0x8) 07:49:12 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x8, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x60208, 0x40082}}, 0x28}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000a5fc510759944aa90000003fa7525bd1235a9dd7712900280012800a00030076786c616ed36c2009304dc1f36adf8605b1369b758e5ca0c6bb24130345960a9922012ffbabf0e350698d1296c21898dc0000016020780c18fe2a8d5d2929"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$pppoe(0x18, 0x1, 0x0) ftruncate(r3, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b14, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000400)={&(0x7f0000000200), 0x3d, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0x57, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x28038b0ab70a9239}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) splice(r7, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:49:12 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x300, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80100, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 07:49:12 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:12 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/ocfs2_dlmfs', 0xe6b42, 0x1) setuid(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2800, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = memfd_create(&(0x7f0000000000)='&\x00', 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x101000) sendfile(r2, r1, 0x0, 0x2e809d36) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x101000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x21a, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24008810}, 0x4000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 07:49:12 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000140)={{r2, r3+10000000}, {0x0, 0x989680}}, 0x0) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) [ 1246.132943][ T26] audit: type=1804 audit(1638517752.896:437): pid=10803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/464/bus" dev="sda1" ino=15235 res=1 errno=0 [ 1246.146645][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:13 executing program 0: setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:13 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() rt_sigqueueinfo(r2, 0xc, &(0x7f00000002c0)) perf_event_open(&(0x7f00000009c0)={0x4, 0x80, 0x8, 0x2, 0x4, 0x1b, 0x0, 0x1000, 0x20940, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000980), 0x193e13c1e0ba5051}, 0xd08699c35373afad, 0x3f9, 0x9, 0x0, 0x3, 0xf91, 0x4, 0x0, 0x3, 0x0, 0xbb}, r2, 0x2, r1, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0xb1}, 0xfd, 0x0, 0x1, 0x4, 0x1, 'syz1\x00', "7f73c2e034d913fbcd5e3297b7b4f30c6a8aef9b6d13ba023e2da6ae444ff84d", "9c3d1a0c8f153be305c4cc939bf233c59284063fc82bb6fbcc75c34097107f16", [{0xc0b, 0x5, {0x2, 0x7f1}}, {0x0, 0x100, {0x0, 0x7f}}, {0x7fff, 0x80, {0x3, 0x2}}, {0xdd, 0x7, {0x3, 0x7}}, {0x4, 0x8, {0x3, 0x8}}, {0x8001, 0x5, {0x0, 0x9}}, {0xfff, 0x7}, {0x4, 0x9, {0x3, 0x81}}, {0x6, 0x8, {0x0, 0x800}}, {0x7, 0x1, {0x1}}, {0xeb1, 0xfc, {0x3, 0x9}}, {0x4, 0x207, {0x2, 0x61d}}, {0x8c54, 0x2, {0x1, 0xda6}}, {0x29d, 0xdb, {0x2, 0xf8000}}, {0x2, 0xfffd, {0x3, 0x2}}, {0x1, 0x5b, {0x0, 0x10001}}, {0x1f, 0x100, {0x2, 0xe2}}, {0x3f, 0x522, {0x2, 0x10001}}, {0x7, 0x3, {0x1, 0x10000}}, {0x6, 0x22d3, {0x1, 0x80000000}}, {0x8, 0x101, {0x0, 0x33}}, {0x5f6c, 0x81, {0x0, 0x100}}, {0x9, 0xf7, {0x1, 0x9}}, {0x3, 0x0, {0x0, 0x1}}, {0x6, 0x8001, {0x1, 0x713}}, {0xf0, 0x4, {0x1, 0x5}}, {0x40, 0x7, {0x2, 0x8001}}, {0x7f, 0x6, {0x1, 0x95}}, {0x3, 0x4, {0x1, 0x7}}, {0x3, 0x8001, {0x0, 0x8c94}}, {0x0, 0xfecd, {0x0, 0x1}}, {0x4aa, 0x6, {0x3, 0x7}}, {0x4669, 0x41e5, {0x1, 0xb1}}, {0x111, 0x8, {0x0, 0x1}}, {0x9, 0x4, {0x2, 0x6}}, {0x89, 0x9, {0x2, 0xea}}, {0xff, 0x3, {0x0, 0x7ff}}, {0x9, 0x3, {0x1, 0x7}}, {0x6, 0x3, {0x0, 0x7}}, {0x6, 0x4, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x6bc1}, 0x3, 0xe0, 0x8, 0x5, 0xd, 'syz0\x00', "773ab78f113c89045206a6dd3ef544571df17fab2235a5d0e046424e979986cd", "6a2a4f221044ba692c8f82c271d1223d04ae7f3be537dc70d221a1a2939f12ab", [{0x80, 0x100, {0x1, 0x2}}, {0xd981, 0x63, {0x2, 0x8}}, {0x3, 0x23, {0x1}}, {0x4, 0x6, {0x0, 0x570}}, {0x3ff, 0x4, {0x0, 0x3f}}, {0x401, 0x1, {0x0, 0x6}}, {0x7, 0x1000, {0x3, 0x5}}, {0xa6a0, 0x3, {0x3, 0x10001}}, {0x7ff, 0x3f, {0x3, 0x1}}, {0x94, 0x2, {0x1, 0x5}}, {0x0, 0x0, {0x3, 0xb6}}, {0x7, 0x24d9, {0x2, 0x4}}, {0x7ff, 0x1, {0x0, 0x8}}, {0x5, 0xfc01, {0x2, 0x1f}}, {0x3, 0x0, {0x2, 0xc14}}, {0x1db5, 0x1, {0x0, 0x8000}}, {0xffff, 0x6, {0x0, 0x1}}, {0x6, 0xff01, {0x3, 0x9}}, {0x3, 0x3, {0x2}}, {0x4, 0x6, {0x2, 0x1}}, {0xb931, 0x400, {0x1, 0x7}}, {0x8, 0x0, {0x2, 0x1}}, {0x6, 0x401, {0x0, 0xffffffc0}}, {0x400, 0x7, {0x0, 0x5}}, {0x101, 0x3, {0x1, 0x7fffffff}}, {0x200, 0xfff9, {0x0, 0x3}}, {0x3, 0x9, {0x1, 0x10001}}, {0x1, 0x77c, {0x0, 0xfa}}, {0x1, 0x4, {0x2, 0x1}}, {0x101, 0x2, {0x3, 0x6}}, {0x3e61, 0x8000, {0x2, 0xffff}}, {0x1, 0x2, {0x2, 0x6}}, {0x1, 0xfff7, {0x0, 0x1}}, {0xc, 0x5, {0x3, 0x3}}, {0x0, 0x8, {0x0, 0x8000}}, {0x800, 0xf7d1, {0x1, 0x1}}, {0x2, 0x1, {0x1, 0x200}}, {0x0, 0x8eb1, {0x2, 0x1}}, {0x200, 0x7, {0x0, 0x5b8b}}, {0x8, 0x70, {0x3, 0x80}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x40, 0xfc, 0x2, 0xffff, 0x1f, 'syz1\x00', "52d3b8853f7522adbc0bb03ac740d211a40a7e4673f085a909bd6daa7af902a9", "dfd972747b15acccea6f704c1ffc2bf7f620fe52506ab9c5b87f32647ef82f96", [{0x4, 0x8, {0x1, 0xe32}}, {0x4, 0x9, {0x1, 0x9}}, {0xff, 0x7ff, {0x1, 0x9}}, {0x80, 0xfe0, {0x3, 0xffffffff}}, {0x1, 0xff00, {0x3, 0x3}}, {0x4, 0x5, {0x3, 0x7}}, {0x6, 0x2, {0x2, 0x200}}, {0x8, 0x1, {0x1, 0xfff}}, {0x40, 0x1, {0x1, 0x80}}, {0x4136, 0x237, {0x3, 0x8c2}}, {0xfff9, 0x6, {0x2, 0xfde}}, {0x1, 0x2, {0x3, 0x1}}, {0x8, 0x786a, {0x3, 0x9}}, {0x9, 0x3c0, {0x3, 0x1}}, {0x0, 0x401}, {0xf4, 0x6, {0x0, 0x7}}, {0x9, 0x4}, {0x0, 0x9, {0x2, 0xffffffff}}, {0x6, 0x1000, {0x2, 0xff}}, {0x0, 0x3, {0x3, 0x3}}, {0x6, 0x8, {0x2, 0x1}}, {0x1000, 0xa35, {0x1, 0x3}}, {0xd59c, 0x1, {0x2, 0x4}}, {0x9, 0x9, {0x2, 0x1}}, {0x0, 0x1, {0x3, 0x4}}, {0x3, 0xdbd0, {0x1, 0x1}}, {0x3f, 0x0, {0x1, 0x7}}, {0x7, 0x6, {0x1, 0x80000000}}, {0x3, 0x81, {0x3, 0x8}}, {0xffe1, 0x7, {0x1, 0x68cc}}, {0x0, 0x80, {0x3, 0x40000000}}, {0x0, 0x3, {0x2, 0x8001}}, {0x7, 0x7, {0x0, 0x80000001}}, {0x2, 0x2, {0x2, 0x9}}, {0x0, 0x8001, {0x3, 0x3}}, {0x8, 0x3f, {0x2, 0x9bc}}, {0x0, 0x7fff, {0x3, 0x7}}, {0xfffa, 0x4, {0x1, 0xa0a}}, {0x6, 0x8, {0x0, 0x90}}, {0x800, 0x2, {0x2, 0x40}}]}}}]}, 0x710}}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:13 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:13 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {r4, r5+60000000}}, &(0x7f0000000180)) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0x4}, r2, 0x7, 0xffffffffffffffff, 0x8) 07:49:13 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xd8e, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x800}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000002030101f8ffffff0000000000000000daa5405749ffae188cb1f5e96deb742944e961e280bd6e2881b34b010bacf1a93d577e5ccda5f41246bfc14957a982ee620ea823d9017adbf2f1d7f01c5f27c3b65fa6ceba901bf47511c9ec0c9e6961e0e4c9b0130ca2783e03150b5ecc904166234057d096d225262bb9aa3c27f6e54b8ff688a933801e8e3520d33f55e8bffd474cdf10234d32497bb5e47822e56883f9156223cd075516de06a78897823cc6bd3816dcf81526091a839a31"], 0x14}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, r3, 0x7645f000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x208202, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:13 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020016) [ 1247.177146][ T26] audit: type=1804 audit(1638517753.936:438): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/680/bus" dev="sda1" ino=15229 res=1 errno=0 07:49:14 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) write(r3, &(0x7f0000000240)="a966a1264b0674fa9e6d0b250255030483d48e878c1c5855a91045a7f6089e1b7540f8f8d1c34d88742be9ea790277457507ed33ee0ec2bd1ffd3db2d4249b5e91165ee0631229bb9581ea89194ddbf755ee441d1ca7f05a91d73d0bcd8e35794ad899e26376052c4c038637df4213e7fefd8c4ba7aef0499abc6b92c9e6feeedbd433fc1a9448a433ab69a89d6dbded00ca588374daad7c38aa4dada5421f8bdb0a278aa6241051fb38", 0xaa) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1247.683453][ T26] audit: type=1804 audit(1638517754.446:439): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/465/bus" dev="sda1" ino=15240 res=1 errno=0 07:49:14 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020016) [ 1248.140534][ T26] audit: type=1804 audit(1638517754.896:440): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/466/bus" dev="sda1" ino=14996 res=1 errno=0 07:49:16 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = epoll_create(0xfffffffb) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r3, 0x8, 0x0, 0x7f}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:16 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xffffffffffffff81, 0xc7, 0x9, 0xcb, 0x1, 0xdfc, 0x7, 0xffffffffffff8000}, &(0x7f0000000140)={0x101, 0x1fb, 0x6, 0x0, 0x81, 0x4, 0x7, 0x8f}, &(0x7f0000000180)={0x9, 0x80000001, 0x2, 0x6, 0x638, 0x0, 0xaae, 0x8}, &(0x7f0000000240), &(0x7f0000000380)={&(0x7f0000000280)={[0x7]}, 0x8}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:16 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020016) 07:49:16 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x300, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80100, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 07:49:16 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020016) 07:49:16 executing program 2: pipe(&(0x7f0000000040)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r4 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) r5 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f000066d000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r7) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x5, 0x2004, @fd=r0, 0x81, &(0x7f0000000100)="df9d1b6391b347ecd78dce199a7423999bd69fe7db162ebfa0e673e38fa37efc91c1e393216a4e6f05d79388fad2625eea841bef6409aad1bb417e2516636e24754dd8c43d0a62e68df4ce49eabbe4902cf57f", 0x53, 0x0, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1249.389623][ T26] audit: type=1804 audit(1638517756.146:441): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/467/bus" dev="sda1" ino=14129 res=1 errno=0 07:49:16 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) [ 1249.595700][ T26] audit: type=1804 audit(1638517756.166:442): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/681/bus" dev="sda1" ino=14097 res=1 errno=0 [ 1249.959093][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:16 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000140)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:16 executing program 2: pipe(&(0x7f0000000140)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x3558, &(0x7f0000000240)={0x0, 0xa6d9, 0x8, 0x2, 0x18c}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ee7000/0x12000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:17 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) io_pgetevents(0x0, 0x5, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000180)={[0x9]}, 0x8}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:17 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:49:17 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r8 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) r9 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r10) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd=r7, 0x7, &(0x7f0000000240)="1af8d6d55413f5a03e7f0345343a64a4c314ae95ee8ec926b3ae23bacf4e06e24c387840d82d897dbcb4b75634e5ebe9632a08c76ad82790d40db763802b2f36e5675377c0e18c524040a24a57e1b4438e2e8e5e5295154e1585f3a38d250cc2847f21acef27645e753bf8bd44862cddf54d7f5e8746b22aeca5dae6ab379d1db0ea669e8f530056cd8f900ce9009746ded64eed6b590ea5327645495e7db0463a0e3ba69a54697727f9f6feb8a539661430b96669015cf3b4632b6e3cc228c3ad1478f3c60c4a15b919c09aeb4da09e64581c", 0xd3, 0xa, 0x1, {0x0, r10}}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:17 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) [ 1251.092275][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write(r0, &(0x7f0000000240)="ed363816fae7b027f4ac34dfa1bb6b6b60a9fb87ecc26afa59e860764314e58acd01809ceca2492f2ac130289ca0befb092087fc0ac29434195ec8323534490d29d7e2555f5b3b9a328959a35edca91935c0f770719fc99782395c9efb1d44bf4b304206dca236db1f2e17dd25ef2ecfeb24b228c77b9a6a07e706be56db57581f274237d9bef4", 0x87) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_io_uring_setup(0x1330, &(0x7f0000000080)={0x0, 0xa81a, 0x0, 0x0, 0x37d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:49:18 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x16}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:18 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) [ 1252.160843][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:19 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x3000000, 0x810, r0, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x3a7117b4) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:19 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x100014, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) pselect6(0x40, &(0x7f0000000440)={0x9, 0x9, 0x8, 0x8000, 0x401, 0x1, 0x0, 0x2}, &(0x7f0000000480)={0x52, 0xe4, 0x5, 0x47, 0x8, 0x59c, 0x6, 0x1000}, &(0x7f00000004c0)={0x40, 0x7077, 0x7889, 0xe56a, 0xfff, 0xfe00000000000000, 0x3, 0x12d}, &(0x7f0000000500)={0x0, 0x3938700}, &(0x7f0000000580)={&(0x7f0000000540)={[0x575ec2e4]}, 0x8}) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000600), 0x0, 0x208400) r5 = syz_mount_image$iso9660(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x1, 0x1, &(0x7f00000007c0)=[{&(0x7f00000006c0)="e74cc57a938f7cde8bb13691686f0c6438e793c192c5ea99f65e9eff61617c454efa74ef671c0de13448dd273a1a01cb1d554e44ee41d9c7766c83a782b903d9f6fe5b68e2811d363df91e2659a9d936ba29a250de0441a82de00e91e47d89addf25feb029b5127ae37edad679b9b77562df94a24c4695ed6374b20b9ae94f9487ce5c13bca27b40b9da4da3658e959d272f0a97d3acc4be1b9ba9307944eb6eed0e377189d5b315c85d17a2603cdf4ea5f56895c5f3fde40fa7c92b4c75f24bcc7fd96cc9a79eb5e0e1679511", 0xcd}], 0x40000, &(0x7f0000000800)={[{@hide}, {@check_strict}, {@map_normal}, {@nojoliet}, {@nocompress}, {@cruft}, {@overriderock}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_eq}]}) fanotify_mark(r4, 0x49, 0x4000100b, r5, &(0x7f0000000880)='./file0\x00') pipe(&(0x7f00000005c0)) pselect6(0x40, &(0x7f0000000180)={0x0, 0x8, 0x9, 0x5, 0x3, 0x5, 0x7, 0x5}, &(0x7f0000000240)={0x3, 0xe39c, 0x2, 0xfffffffffffffff9, 0x1, 0x7fffffff, 0x8, 0x9}, &(0x7f00000002c0)={0x1, 0xffffffffffffff81, 0x2, 0x100, 0x2, 0x2, 0x7ff, 0x5}, &(0x7f0000000300), &(0x7f00000003c0)={&(0x7f0000000380)={[0x2]}, 0x8}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xfb, 0x848, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x1f, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x7, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1252.519396][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:19 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:49:19 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000012c0)={0x7fffffff, 0x0, &(0x7f0000001280)=[r0, r4]}, 0x2) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r8}}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x210000, 0x0) r10 = io_uring_setup(0x4254, &(0x7f0000000100)={0x0, 0xb449, 0x8, 0x2, 0x17, 0x0, r9}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001240)=ANY=[@ANYBLOB="0fdadb3e5f1e6f0100a10149c3d0614a58af081b751b7200f0748c9987b595000000"], 0x14}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r10, 0x5000940f, &(0x7f0000000240)={{r11}, "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"}) 07:49:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:49:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) io_uring_enter(r0, 0x20e6, 0x42a4, 0x2, &(0x7f0000000100)={[0x8]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:20 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:49:20 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_create(0x4, &(0x7f0000000240)={0x0, 0x18, 0x1, @thr={&(0x7f0000000180)="d6eb948c", &(0x7f0000000440)="ce3f567569a030523aede91de0d0929627da97c592c5b34dec9372cb9eed2857a3d8058bc9ff4143d74bade8e4ca078f5763373dac5ca5b4fb65dfaa853cd1b17f32303bde7d689aa3f625fad5e654e4f338c23de918912cc6a6c52b095aae5e74bd78a2dc0cb8f698af47b793f44861230035131be061763bd0ed9254db16b0cf2ceaa4ed211fa9ea99afaf8f26834eb88ee39abc096048ed4c6327d4fed1217691ec23bb11b55d979837576bdb1f9f0a555387132cd89d4c1b7896cb97c4da5f9f010d5525cf02f35f34f40add77f7670bed89ae4fef8ce56583be52c9a22dadb96ac4f2a8e79e8c92458a"}}, &(0x7f0000000280)) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000140)) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = gettid() tkill(r4, 0x2c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x100000000005, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1253.623069][ T26] audit: type=1804 audit(1638517760.386:443): pid=11017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/471/bus" dev="sda1" ino=14014 res=1 errno=0 [ 1253.658300][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f00000000c0)=0xfffff800, 0x0, 0x4) syz_io_uring_setup(0x106f, &(0x7f0000000200)={0x0, 0x56f, 0x8, 0x0, 0x133, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000280)) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x800, 0xc, 0x1, {0x0, 0x0, r5}}, 0x9) write$vga_arbiter(r0, &(0x7f0000000180), 0xf) write$vga_arbiter(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b20d47916ef399f1a6920006d656d00"], 0xc) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1253.795317][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000140), 0xf) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='timerslack_ns\x00') write$vga_arbiter(r5, &(0x7f0000000240)=@target={'target ', {'PCI:', '9', ':', '1e', ':', '18', '.', '1e'}}, 0x16) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r7 = dup2(r6, r4) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r7, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000100)=r0, 0x1) 07:49:21 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:21 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:49:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r5 = syz_io_uring_setup(0x1afa, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x2, 0x20f, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r5, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r9, 0x0, &(0x7f0000000240)="5db7c6edd6ce725ca39ce6ade924fcfa74564bb3ef790e261caec96bf23c62f4c8b301d41806218f5390b440c71302e62a419ea16dfff9a08518e5d5178bc547ac15ab601a65249efa02d5a3257691ab8cb9a0ae1a5377d1c8dfecb272176c377f008d1eeaf7f5735ee865fa93e068e6357bf19b3543996ffb985bd555d2837330fbb4c47c99a2508e2818faf1ebbbb5ba2cffd04b604bc572799518bd0201f172c9", 0xa2, 0x800, 0x0, {0x0, r10}}, 0x40) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1254.850856][ T26] audit: type=1804 audit(1638517761.606:444): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/472/bus" dev="sda1" ino=14013 res=1 errno=0 [ 1254.882764][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:22 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000004500)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000180)}, {&(0x7f0000000640)=""/170, 0xaa}, {&(0x7f0000000240)}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/134, 0x86}], 0x8, &(0x7f0000000940)=""/52, 0x34}, 0x3}, {{&(0x7f0000000980)=@nl=@proc, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/110, 0x6e}, {&(0x7f0000000a80)=""/74, 0x4a}, {&(0x7f0000000b00)=""/186, 0xba}, {&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f0000000c80)=""/128, 0x80}], 0x5, &(0x7f0000000d80)=""/196, 0xc4}, 0x6}, {{&(0x7f0000000e80)=@ax25={{0x3, @rose}, [@remote, @null, @rose, @netrom, @null, @remote, @null]}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/188, 0xbc}], 0x2, &(0x7f0000001040)=""/204, 0xcc}, 0x9}, {{&(0x7f0000001140)=@qipcrtr, 0x80, &(0x7f0000002380)=[{&(0x7f00000011c0)=""/56, 0x38}, {&(0x7f0000001200)=""/139, 0x8b}, {&(0x7f00000012c0)=""/86, 0x56}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)}], 0x5, &(0x7f0000002400)=""/235, 0xeb}, 0x7fffffff}, {{&(0x7f0000002500)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002580)=""/32, 0x20}, {&(0x7f00000025c0)=""/84, 0x54}, {&(0x7f0000002640)=""/69, 0x45}, {&(0x7f00000026c0)=""/82, 0x52}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x5}, 0x9}, {{&(0x7f00000037c0)=@alg, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003840)=""/213, 0xd5}, {&(0x7f0000003940)=""/132, 0x84}, {&(0x7f0000003a00)=""/53, 0x35}], 0x3, &(0x7f0000003a80)=""/157, 0x9d}, 0x1f}, {{&(0x7f0000003b40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003bc0)=""/124, 0x7c}, {&(0x7f0000003c40)=""/133, 0x85}, {&(0x7f0000003d00)=""/193, 0xc1}, {&(0x7f0000003e00)=""/16, 0x10}, {&(0x7f0000003e40)=""/77, 0x4d}, {&(0x7f0000003ec0)=""/113, 0x71}, {&(0x7f0000003f40)=""/53, 0x35}], 0x7, &(0x7f0000004000)}, 0x5}, {{&(0x7f0000004040)=@phonet, 0x80, &(0x7f0000004180)=[{&(0x7f00000040c0)=""/190, 0xbe}], 0x1, &(0x7f00000041c0)=""/134, 0x86}, 0xffff}, {{&(0x7f0000004280)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004300)=""/223, 0xdf}, {&(0x7f0000004400)=""/113, 0x71}], 0x2, &(0x7f00000044c0)=""/31, 0x1f}, 0x6}], 0x9, 0x0, &(0x7f0000004740)={0x0, 0x3938700}) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:22 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:49:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1255.545633][ T26] audit: type=1804 audit(1638517762.306:445): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/473/bus" dev="sda1" ino=14513 res=1 errno=0 [ 1255.578804][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:22 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1255.686668][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1255.732201][ T26] audit: type=1804 audit(1638517762.356:446): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/98/bus" dev="sda1" ino=14529 res=1 errno=0 [ 1255.832078][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:22 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1255.920775][ T26] audit: type=1804 audit(1638517762.586:447): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/474/bus" dev="sda1" ino=14513 res=1 errno=0 [ 1256.116885][ T26] audit: type=1804 audit(1638517762.876:448): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/475/bus" dev="sda1" ino=14016 res=1 errno=0 [ 1256.156840][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:23 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000140)) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:23 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x400) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x400082, 0x0) r4 = syz_mount_image$sysv(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x1, 0x4, &(0x7f0000000380)=[{&(0x7f0000000280)="f24fe33e63bd3ff5ac95f551e79ee2d2cf716c95bc5aa3db165b72a0fb8de94980d3", 0x22, 0x3fb}, {&(0x7f00000002c0)="064a5ac2bc7a92782a20eb4c11ad3fd773bd9e37089ecde1e01b8ccd4e8cb66c8f5639595563ddcf5d534dba", 0x2c, 0xfffffffffffffffd}, {&(0x7f0000000300)="10e23f124c56ce29b96613265a5f7451cb79003c70a7a2f00e402b17907bef8eb7eaa78106", 0x25, 0x6}, {&(0x7f0000000340)="156dd08c0bae886c3d4436f5a3d0fa6e8c2b326545c02d22447bae7ad1558717f6c2df8b9f97be288047a547a3b2dfe6b3", 0x31, 0x7fffffff}], 0x1938020, &(0x7f0000000400)={[{'#'}, {'!{['}, {}, {'\xc7'}], [{@uid_gt}, {@smackfsdef={'smackfsdef', 0x3d, '#-N&]'}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000440)={@id={0x2, 0x0, @d}, 0x40, 0x0, '\x00', @b}) write$vga_arbiter(r3, &(0x7f0000000140)=@target={'target ', {'PCI:', '1f', ':', '13', ':', 'e', '.', '1e'}}, 0x16) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:23 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1256.578108][T11067] loop2: detected capacity change from 0 to 264192 [ 1256.604346][ T26] audit: type=1804 audit(1638517763.366:449): pid=11068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/476/bus" dev="sda1" ino=14609 res=1 errno=0 [ 1256.613850][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:23 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:23 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={&(0x7f0000000100)="af9a9c11b600a026e675432524b886a1783e8183e8284162e7b519a46d57b2e6bcb3e5ae5a34aaa2d0c350c7b62bd56c999a78221dab4eb7b8e6029130b1f17bb07fd94a346e0a42f944a28fcca73b80286b8d7770a7113932b09fd81fb805af998a9c4080ec1632ffd920829995e605865db3f2356ceb5b6d9eefb7a5bc7ebf1ae05f5fb5656d7e238ee8eafd370aa23efa40b58ec556d4ba272e", &(0x7f0000000440)="a4d0f84df60dcb2ad530dee86e93e08b270d948f025ea452360b1effccee24f26bd11c44c076f38d3f289b1875ca0c481838538bf199d0383f9e3fd806549542e66acd461a024c90cacc11a7a0987494734a1fe3d8ad04b0e07f73085958b89d526156bcdc665460d89da4ea36cd422ee64002e4687d77419ffd75b3557885996e9a267c505f81bf06b7d313b167d8a489f3ffe8cad5441fc9bc0d5dd7c980bdb6"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000500)={{r2, r3+10000000}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000540)="c4c6d7e7179a089d7f700cfbe4f0dab10d58705d1cca0b3fdb353e0780d475361763f5955d28e9af74127fc2607fbe72957c2ef5492c65e639d126c534051a1a03db450bccb2e71b7fdc97b48329d55bc6bbf2c97f7a72144054211edbbc784f202e2b425667d798bcec71097faef9baa30386a577e8e56ec01157504afa8fcd084789ba8be66ef0c3a8b44e1bd013a29cc8", &(0x7f0000000600)}}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) 07:49:23 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0), &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x20000000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r4, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000300), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/72, 0x48}, {&(0x7f00000005c0)=""/246, 0xf6}], 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000001000000716f0200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="cd57a806a9e56121dd6afd7e52b891a4ce2186261064d8e33c611d959c7195bccc020b4a3a49fbf804a82cc8cdd15cf4a932259af953f60309b0dc99739d1db96046503150e863a2a4b5a8418c9ee6e9e53407f2680fc63438649af77f4b15e8dc6f23b72ae087a2bb555db002e23f4d73309f21aaab6ce402742ede05ce315d695f2a286d8f615e413ac24b89095e648143ad840344cd1da51b09b6966d9b6623731a1a00000000000000006b5b4096c56cd744450261ad30124a9da6c8ee708e1301f02875b7097ef67efd7ea450d37e1bc98ffad26c98c486d9b141f41052b3b9683cd76c"], 0x70}, 0x40010000) fchown(r2, r4, r5) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000001c0), 0x1) 07:49:23 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) [ 1256.894991][ T26] audit: type=1804 audit(1638517763.656:450): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/477/bus" dev="sda1" ino=13913 res=1 errno=0 07:49:23 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x0, 0x1e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4606, &(0x7f00000001c0)={0x0, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x64d}, {}, {}, 0x2}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) [ 1256.951065][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:23 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) getpgid(0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1257.267048][ T26] audit: type=1804 audit(1638517764.026:451): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/478/bus" dev="sda1" ino=13970 res=1 errno=0 [ 1257.294630][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:24 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x8000000) r5 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x6, 0x2, 0x0, 0x1, 0x0, 0x1, {0x0, r7}}, 0x81) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:26 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0xa00, 0x1000, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000100)=0x1, 0x0, 0x4) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:26 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000440)=""/210, 0xd2}, {&(0x7f0000000540)=""/250, 0xfa}, {&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f0000000640)=""/164, 0xa4}, {&(0x7f0000000240)}], 0x5, 0x1, 0x1ff) 07:49:26 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:49:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:26 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203011e21c7b3a5978658a0edf4cdd2"], 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ppoll(&(0x7f0000000580)=[{r2, 0x200}, {r1, 0x406}, {r3, 0x5170}, {r1, 0x8}], 0x4, &(0x7f00000005c0), &(0x7f0000000600)={[0xfc7a]}, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r7 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x39, 0x1, @thr={&(0x7f0000000380)="62de8d5f8802b51a25a09bf7a3c974cf4314019e551a8fafad4ccc87f67d2dcf6e05611a567f56851143905a2b6060aded3cdd65ae74fd55aa6cdb5321f5792ca7bbe2cc123f466172c745841e3ca86daec2360479ac12c0c48e36b7132e47679d070e500f54f0306bbc1f439f599171183c9e8db33d52fa4b94d0", &(0x7f0000000440)="82c2c8e4c1eeedf0abd03521cc75b903a4c003a241d47b6a4f8c337fdf75ffbb7232d3962dc2d995d7518894d16ab027ef7c1a5ddda246317533a5cfe9cc164f80bb9793d406066b5719bbee0a8e02482f6c880105f0a447db865d0888d6ee102a22cea0afd1d706728faeecb9eb6215bbfd4173a4fb238b5b9f184b568959bbf47c0e94de3b96b27038e972c8ffb42e6df725961282eb039ba59e94bc83285df0cb46"}}, &(0x7f0000000240)=0x0) timer_settime(r8, 0x0, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000540)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0x7d, 0x4, 0x1f, 0x0, 0x3f, 0x1a800, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_config_ext={0x5, 0x7fff}, 0xa880, 0x20, 0x2, 0x9, 0x3, 0x24, 0x1, 0x0, 0x80000000, 0x0, 0xffffffffffffff57}, r5, 0xe, r7, 0x0) 07:49:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x100) write$vga_arbiter(r4, &(0x7f0000000140)=@other={'trylock', ' ', 'io+mem'}, 0xf) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1259.702651][ T26] audit: type=1804 audit(1638517766.466:452): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/479/bus" dev="sda1" ino=15034 res=1 errno=0 [ 1259.738975][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:26 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x1, 0x100000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) ptrace(0x11, 0x0) wait4(0x0, &(0x7f0000000380), 0x80000000, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4}, &(0x7f0000000040)=0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x6c) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2000, 0x120) tkill(r2, 0x40) r3 = gettid() rt_sigqueueinfo(r3, 0xc, &(0x7f00000002c0)) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x9) ptrace$setregs(0xd, r2, 0xc915, &(0x7f0000000080)) ptrace$setregs(0xd, r2, 0x680, &(0x7f0000000500)="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") timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0xfe, 0xff, 0xdc, 0x0, 0xff, 0x848, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7fff, 0x8}, 0x1, 0x1, 0x7, 0x7, 0x5, 0x6aa, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, 0x0, 0x10, 0xffffffffffffffff, 0xa) timer_settime(r1, 0x0, &(0x7f0000000140), &(0x7f0000000180)) [ 1259.961653][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:26 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00') io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:27 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(r0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)) r2 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000240)=0x2) timer_settime(r5, 0x0, &(0x7f0000000140)={{}, {r6, r7+60000000}}, &(0x7f0000000180)) 07:49:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:27 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b14, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)=0xffffffff, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x179}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r6 = syz_open_dev$audion(&(0x7f0000000140), 0x10001, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000003100200027bd7000fcdbdf2500000000280001000c000b0008000300010000000c00eaff070003000800"/60], 0x3c}, 0x1, 0x0, 0x0, 0x80012}, 0x48c0) io_uring_enter(r6, 0x1ca0, 0x8747, 0x1, &(0x7f00000001c0)={[0x9]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000380)={r1}) syz_io_uring_setup(0x2df8, &(0x7f00000003c0)={0x0, 0x32fc, 0xd, 0x1, 0x24, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x8, 0xfffffffffffffe01, {0x0, r8}, 0x8, 0x2, 0x0, {0x0, 0x0, r9}}, 0x4) 07:49:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:27 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:27 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x7, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f0000000100)={0x1, 0xdcc2, 0x200, 0x6, 0x1f, 0x4, 0x400, 0x1}, &(0x7f0000000140)={0xff, 0x3, 0x6, 0x80000001, 0x6, 0x3, 0x0, 0x6215}, &(0x7f0000000180)={0x6, 0x10000, 0x7, 0x401, 0x4, 0xfff, 0x7ff, 0x4}, &(0x7f0000000240)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x2]}, 0x8}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x6, &(0x7f0000001540)={0x0, 0x3, 0x0, @thr={&(0x7f00000004c0)="3f1a12e75a4bae1f5831d1c2ea6843807a5d8932d3c49b06d5ca5a41f1d6b108e77b9e47a138037992fbf3d3300f2e96792d5b7a27e9faaedd7f1e214341d512ea02c0d5a5f765061e9751ca3c6acbc9e3afb66fe41289c5ed8c117ec1ec4b4dbc7947957def5b35756486def02eceef8c1b5d8e1aec34e511374f", &(0x7f0000000540)="7b425e19030eddf204012125fb7d8e98c04287b6b0aac57d50212395e71d52f0d8a8e12e5e2821a964668e241ce1e4ad787018c85dc8655dfde7e6c721dced3aed1527eaef7360531b9e955e3a4a71bb623c255ecbcb666ff15d58e7c07615300e8ad36d8a3c1a3cb7705826fcce6b42b6f512b21e3c8d600b65ba45c945b2d4eb769762808559751d60273b6fb4f578bd599e7ae9c61f312f1f974cbbf3c077565e946a8e2a80c3e3bccd8970f1c74a769efdb44d2a88f5fa10d567e0139ee53e0d5993933a4bf493c774c4c8c2830aa41366da34feb873f6c890fd0c966e9ea0ea6f43566b82dad4ce49702759d10d3e0601bcd81eb83bddbf316fabf69a8eb29c337fe8f31accfc4760c60d2ddd22a1fa446b817c715e6791c267633b2cbba3dcf282843c28c98ac78da617da3a94752dda8241580b189540902416809fdb6295fa0c2489e9c3b086bf8e42538eba04b6c69f5226b18b2e96bdacd81ca9894c1e2ad51186e751687a23c54a625650fa84f5e96b4e9099112e00739b5d06a1368344735d6daf50c7f69a46c3371455fe447ae6f69fb50bf7f27544256dd9e0a3cdff3c7695e00396e9b1254b42ffdc6f38e6302c530ba73de62e7b05610ccea32885e41f075eab6ee727c6e037dde0702bdbe26418a27b67b11e3b149b203b86e42e79c18e4966934ffa61bff6feb11f1b48f87629301ee0a998a4b1182f831525829f047a57bcb46fba2542db06c9252bca8ffa10dc157ad9c77fe8516eb3348cfc05412774d764852914329fa6f885878ba9f1694fb18e78549f25d8c785e231a72217bf47674d0aa4170206af6dcaefb1589b3e751ea8c1be0ef41a970afc62d0caad3018b58d50bcb92966b569ccd4d5db7fd60337738c100be29c532ef9dbb354128cf7f4009f521d55800b7e124e4ca23cc3caac37aebebc23b172016a252e6a5a57f2d0a98d51b08f97283b1cc92bcb07dd05d160eed0729c61720d6643a5706d478fc317960c2b4a70a3c2c3b5dba420ac686a10282cf00b920bc857078d5c67bd8ec0db8eec8ef00914de95245f1840e0c079862a9bb555806d5510b385d623f7ed13dbae3209957962a52113dad0ca8c7051cd8ad79b38e0c044d67fbf5dc9450570ddef9e8f416b5c13c69b673003f99b6ba0f58335aaa03e47e3f4cae21474432480d7e97bf8f7e6058ce3ed7f40d0fb24277f794f0d9d95620afe6e9a4bb60a72660988cc3cd23d390441ce52471e8e80474fb720f556225846be565918a8a08eff003227e61d31c85cd35df5ac1da48d3590c3689df45b6d140c5b702b26867a33f73c010fb26b76b831c481900be32167673a29cd38207459469e3c52ee2e6d4c84b31ad4f2b16d925c2d11bffee0a0f11809a8885012da4608293811d0fd2f61ab6ff0271fe7090dd2ee84fb1cc886b351d312fbc9eab7ab9561d6ae20e456623850e7f7545cdd8df6e4b22a2f9e2afa0a2a376aa24805cea7f7fad72838de39f450b7d216c1306fb26123766cc06c21fb2ab32b62a7e2f8f51529bf4c602eba9a56432ba9525e622bed410b449324cd197b9a94277afc2b0e83f2fa978daf94e1a5bc2a1366ba8dd48d68ab28cb854c2e89711daa8571c501460f7abbf6f3057064e9c09b4fa7dfd16748c3675a2e0653a05800ada313fa03f675b4f485f298d9a7c66f4d61255cc665f6afa0452f3cf106311ba7bc68d989fc72b1a9c170712320649082a2ed482e211e135626a1f95c9096b72820ab4846b03f9db7f3e14043365e2894cf242893aa66fcdb7c35de1f6893a19a21522f3c3c49dcedec7213040162a924050681d76068b3b3f2454533aaec486a62c320336752f9b9f2b6c0063574a80e640cbbaa4b18a64092490765e45c49dede1938fd0ec8e0042c9bfb0e891bbd40403c07580d550a80c6e659564fabc399fe6212e7011038f9586ed3ff221114f7cd9c0f06de4d7e6ae95a3a6c7ddd9cea583d3a4c3256adb098a974eabecbdd7abe4b0d2d314908152796e888a50e8affe2329caab37cbc068cdb06efcf9850e6b32ff7e8833645af19ac721228b56305af6c24cb60b1acb913ab39c5be420359e0c0a9a8db4491402908c0294416bbb2dbe8ac9f8839c7b3e425a22c8476b4e8f17d7ea63b5d5d4244287203acd4538401e4318403d58c8256af2c1a2078450d11da84f4bdcc55bf0e54d94e2ece9aca995e4d1f13b357e1203fcaf94e7fdefad8f41f4d442650da5ae3cfcaaebec4bbe8ab14e4e35ce8a370f3f477560c7c31e7eceb278109e5a98be0edcf2085e5a7f8ebd2682ebb76eed6281ea93d470020778b58f69a2c40d6235278fd378db35cfd9c430700b675b749224e8b234ff35e1bc7ef9b70a8c26e1dbaa49f9eea2d845cb6412356f1966843e1303fcbd1b8dc5d455d89ebbfc1502b59f5828a63c0cbe2df3e7ada7dced35fad8e17ce53c9cac03d40b1330cd9783f5fd9c236dced88cba6c1f0b7550087342e79241305b10a5abbb913e74ba121e2eb794285852457fceb80751bf052e234dc011ac91c21b5aa5eaa977ab376d1b293a1334b3c1f0276ea6381666f7516308078fab2be513cb8e18d6f3e27097d831a9c5a9005a7ffa5203bcf8de2de44bb9b270528d65294e0113ebf4bdf3865d84e135d0af8a69e84172827705df7d21b9fe5ee31caa9eaae79c232d1e16e69341c5bc89586b262e397bebf4993e6328de359ae71e09c1869b8478f20a7f70800508833e76d2dd27754c5fe6450adef0a19c82ebb5b2a6dc1630e4e7960715c4f9c387feb8f6bb63e702d5f9a23b819befe5918939f5b8d67f2e61dc759e8b82d9a190bf46b3e2108fa897308e1bc7121b44a988d1356acd4d8d3f339c06a271d1db71f339d04943cf6656d90a4522dfde8da48dbd56cd887f4d404ab61a06b8ea6ee2acf2d22d021ce2a0b48276c8a7deb5960764f96ffc21f933ec5f7b09f1ff0aabc106d702c24648116a905daeda3264621d144ee997c24c7762dea24226c2e9fd4da7c5b547812954295d7628f15056934d55005b778080be6f4c51d0626f5ed13bdcc954249fb99d6e629c38fa9fe15aa4874808a5702e503e6996e41165cae076c369c85c47d9d2aeb084b67fcf5c8df40649e15be637b46074afa39cff7e8e9b3a002225993cc3d0aef4f48846d4676c7ecafe2429766c78bdafadc6c37fb91a547fc582aabf9e7d43d1031db7c253d5be8c959e9f896fa1cca4fda2bc654e882ba98b36315fc2ae5cf29ae094d5d82f1eb7962da9a80502d51f47d87f26b65ac9ba14fb7c66fae827a3400181dbdbd7d99f7e20d627f5d1721a0ace957ad8f3c63d761a5840f4a94c67fe5cd9815bec1c177cbe7de7868624b26bdd81c69cca6f69ceb84fd99e2677fcc59ff6e4869f1fb3105b323a910f50ca91422b639b570f5527ba2dc8a72566adc4d879eefa0d10f084d24d76bd7fdefa747aa4559a6aff07426ab92d272e5c4de2adc3e62d6debecb7c96023de80a246e24b50f52d2d7e702222ce78beba4fe1c16d8b5e619b35d8bb09b1cc69d1e79598364e036dcfc794e937a0057b05b710d87c0c5e56d72415f6510713a198ecb45118264af0daa89ba41adaef6fa4ac9ba59f3f4f40f43ac285a177263758a572b784b41cd48125ca2b8d207fa1b74e66ab37be10afe05072909419de437076a33629a3228b228bcbb00dc97d5873ed393c26034ef3ba3930fab3a7978490bffed9c0284b8495bc656b4c14d4c080cb47923a6b36544a113ce23df5901454407ea5a00ee98189613cc52d3dd2ef138629627ff7b17af0406f4159b351b506a0709fb3e315bff0d423c2db1a5ed15dcd8dc4a6df0662aea9e89f14a7209005c09e74a587b123c533912448e2c45d2c06cb383291f432822dc9f7b2b38cd7fb1c104430bc5c8a4e649a0d4ac34f2acc6e20902827a8b7f517d03a6955f043d4acab223e36ecc52a40ec724e3ae9c2622d93341064a43f071499e79a528f5fd4445028a51dbdda8b045ce81eee3af6e64da9fb0e691b79434c23fe44f39ce85f56ec2d7ea7772af46016053b43b84b874189c0edebf6f849af115a4f87391f2528eaebf88b51c72f63c4673c036a35e1934adf7ea6007a935d528304e429d795901320016111912df436386ea4f0784c079070378beab16b18ef5dab5523a4613d80f7f7ead0b5313db689a9aab80af16e9ecd79454ef1dc1850d240c290e50600396b567d6bc0d2086890eefe455707f2863e7b9a0e40437843ec567383d3bde6a80d63a63d4b41d75584257b6aa24ea8d0f8be2fa659ab3ef97c4ab170cf09b6d29b348db203a6fc5a3ae3968d1e90228f48f614545ab11708b5d262097a64a91fde851591d1ad7746ccb6030149afc615bdb3f37f591053bf66a9eb481cee7be5e04911c6eb40e8355b9e5a7e92af703f6829cd0e5e4f1a66671c5ef551384ba291e728ecd1a0d5533c353ee6ddcbc0de8a1b47dc4601e1e965ee524ab2eb545adf938b8a91a05d78dfa37485d125fc4b4aee220101e19084ca423ce860feef3dba136a070d3d36c8ed2728bda791aa79a6fb46ee8afe72386a21412f48cae0486ef5c4c9e4be3173acf7159321b05d9273c69cd1a5e21efaa6967f12999776a8363d551b97b1704d711a39629759d749180525112d8bb128af4787206152bf3894ebd3dfa73ddf01d486a982ce8c978b896a4ae060bd9f8b7ee2042682ef3ea724d0a748298e423b4198a6cf25713fe142708948140f776ef98042eb0c65c01a466a008dcdcdaa50fa29f916148b0f1c0e07f1c9cbf31112aeb18e9e533f4aa26daf0692289f3b8ca4a1f611578ecb7fc2f69b67e3f64abcfd8ec49ecb221bf97397d912575a6eda084419492100955f6938bf04ddedc44bcdd3406ce5381229b9e2554d056207a5c01e0a887fa278a01b961a6240bc5e8118645037d2d08c8662324d0e0dfec2e9647d8b7710ec05cfb714f64f6d3200c4889120fd38b1c37da3d4d82dffaa2847594b96f75e9127f6efb2180686a090dde8c64dddc3d4eacf4102e5ea525b323ad249ff8221dfe17ca1ea3ad5bbbf9eb14297279e98dec5f2e1f6c61bc27926307a6d276b3e85656d12beeef78ba1c23e91c51c8a7d1c194d54f8adc489fb54fb9474eae529a546b8c876006a290cb726ababaab81fdb6d9a409bba0570b85d4c06354ead3e75be8398820351433f97e16f16ab6086009eaa04d8886d055b3d077300801e3e9147c9ad77173232ab09c573e39c3627ace675987b0f9a45b6132fda2841d30c65677a4386f0a39c2fc87eb21f035bb0bb550a974472ec03161f8ac6575b3e0393af0691aa0e931fffd838c7b6b84e626536e553429f87efbabae0680d26f22334fd1e6bc5d5da1f902ef2999633f7e64dced21a49c91543bd797df50173f57f6e4e91ca87f160e8c483ac5c1379485d0218506266b41f83ed334bb8683a495ee67139b97ed87c0dd163dcd6e98fb0f2b53dab9a67da76a90bef3358cb27b3d4546521427a09db404b13f4331b954c37d8edeba4ac45a7a8080e8bbd553e7944b766e6f48b8c2ac31043cc2e1a5bc18c6d1ce3544fda2cdf957ae98a15d5d0e1b5e1d11a8e20ac7c7cca3687b5fb8c73feab9e33bdf4d4ffed0c03ff6cf9b0b126b8f48d9a44cb8d66c8b1e168b695025707d5195a192942c7ac6d10a8306ada8c2b180122ac56d24dd30d098ae626601f8d22ae7acc55ed7ec9d07cd0ffe94ef7c4901e02576d65b40688b3b86a0c3a355eb700b112eb3c1735ff00941ea"}}, &(0x7f0000001580)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x1, &(0x7f0000000440)={0x0, 0x2d, 0x1, @tid=r3}, &(0x7f0000000480)) 07:49:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:27 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1f, 0x1, @thr={&(0x7f0000000100)="caf33cd316304a7e35ed8cc8e5b5ce65a6eb3402f8a3b9bb3ea5801cfb47c261448084ab07d69e30d0f299a6f65ca9f8c6a86deb", &(0x7f0000000440)="5c359c4366539c3269263eb60d4fd6ebe8169a7694a880264e6453df4e5f2fcbdfcc4d8618eb1ae5f26630a29e40b01c9e5a825652f154c48c4d52a207235661cce2b4de2ad148823bb10bd6a6b442b7839dbe2572c30c61d993d8b06af052a8e6ba7d744a30b875c4f1540c397915fcff4c061579f38d9079596c9697d7cb874e1d87f57117e6f64533e4397e22fc363dca4fa85b87a12c28efba768a595ff2327a2940890948da904c1c889a9d26a31750525fba1af3f7f700755fe2e528e2b0b7f4"}}, &(0x7f0000000180)) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1260.933083][ T26] audit: type=1804 audit(1638517767.696:453): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/480/bus" dev="sda1" ino=13918 res=1 errno=0 [ 1261.000671][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:27 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:27 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1261.396949][ T26] audit: type=1804 audit(1638517768.156:454): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/101/bus" dev="sda1" ino=15030 res=1 errno=0 [ 1261.418992][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000180), &(0x7f0000000240)=0x4) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000140)=@unlock_all, 0xb) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:28 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8024880}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008001400ac14140008000100", @ANYRES32=r8, @ANYBLOB="fd7b4d2eee3a9162d53fb15dd0e965c7358ac5ede9eba574d28f6ae01b111377e2b5419f09c86ff40d4308a31f6d093d7ba941df30e474fa3fcee144140db34b08b2df3caa6bc101c02ec9184f9d678ee16a2a828abf652f1148cd92e9fcf8e8563a411911a4c0cbba7af61c20defe7ba6e4440979802150f4d715a7cd131597d82b7645a8296391ebd241c926f1f641c9f15e4cb93cd8"], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newchain={0x34, 0x64, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff1}, {0x4}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0xcd, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x555c7be07e0b9183) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1262.015429][ T26] audit: type=1804 audit(1638517768.776:455): pid=11220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/481/bus" dev="sda1" ino=15026 res=1 errno=0 [ 1262.073731][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:30 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r4, &(0x7f0000000100)) 07:49:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:30 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x14, 0x2, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000100)="44995ad226dffbfaad9a3ced6139d5ffce84daf1f4bbdfcd2feb1cbddd5ba3a95c2779a92d3a757a", &(0x7f0000000140)="4518fa7625fe8c2705d3ebc6316415ba7c4c2a922e72f8aa2d649df762f3b15f5ff5427d7ad9cdbf26fa3cfa3f65d5a6c2f432aaa3c561ac0ff03c5b551cf23f590b0c5ac0cdcb6d8a4fedcc969e6959b0f2dcb9620b691b2033d680f2fb90bdfadb9b64604e315d7deaec2e231558223224974e7b559e7d31345fff7eb6"}}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000440)={{r4, r5+60000000}, {r6, r7+10000000}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x3fb2, &(0x7f0000000100)={0x0, 0x2b62, 0x8, 0x0, 0x2b2, 0x0, r0}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r5 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r5, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f00000003c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x5, &(0x7f0000000600)=""/9, 0x9}, 0x0, 0x22, 0x0, {0x1}}, 0x3f) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x4510, 0x0, 0x0, 0x0, 0x4b) 07:49:30 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:30 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1263.847426][ T26] audit: type=1804 audit(1638517770.606:456): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/482/bus" dev="sda1" ino=15171 res=1 errno=0 [ 1263.850392][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1264.075055][ T26] audit: type=1804 audit(1638517770.836:457): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/102/bus" dev="sda1" ino=15187 res=1 errno=0 [ 1264.120082][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:31 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250305000006000a004e20000005000200bcc549b77aecd09e26388748150a00000004000500050003002c00000014000700fe88000000000000000000000000000114000900fe8000000000000000000040000000aa08000b00a02d3adecabe2157821a699b0dcdd06260786197d95e5f55ab764a68be22c16c7ff8213f54162a78d7b988cac001998ab60598beab7ec14d2ac3f4b211692f2fa55e1f8c4e72a00367c5eb45865904d77c564c355f51b61f15f1f773d9bd93fa2b2499c9f0de2ed9b914c616c52bf63969b06b00df9805b469c580520b", @ANYRES32=0x0, @ANYBLOB="050003003c00000008000600ac1414bb080008007f000001"], 0x78}, 0x1, 0x0, 0x0, 0x4020000}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x1, &(0x7f0000000400), 0x1, 0x1, 0x0, {0x0, r6}}, 0x0) write$vga_arbiter(r2, &(0x7f00000003c0), 0xf) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r9 = dup2(r8, r7) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r9, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) io_uring_enter(r9, 0x450c, 0xb7f8, 0x1, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x10010, r3, 0x8000000) r11 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x3, 0x4, 0x8, 0x0, 0x0, 0x4d1, 0x10004, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000100)}, 0x140, 0xfffffffffffffff9, 0x8001, 0x0, 0x8, 0x5, 0x1000, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r0, 0x9) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r12}}, 0x0) 07:49:31 executing program 0: ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x3, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x28400, 0x141, 0x7}, 0x18) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000018c0)={{'\x00', 0x3}, {0xfc}, 0x2, 0x0, 0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)="f504", 0x2, 0x0, &(0x7f00000007c0)={0x2, 0x109d, {0x0, 0xc, 0x1000, "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", 0x90, "f1bd3c2ddff3bdaa9bf5632271ec60daf28d22a0caf1ab9d362a9d962839de40c552473904699ee2b51c6a33f57d0c1198b2b234938eff596718b15af326f85d15b5a8fab551fabb3c569f9f26caba7468b85e5d4c47a06e6fe0b7f90dac8afa6bc9f9b4c9201b3afff5c1fedc4c8ce8132f05901b0ed966e301660bfbf3fe064e1a29022305eeeb5a91b271ade389bc"}, 0x4f, "2410296a7b32c7b14125d2530d2b678e64012ea7b6445c44bd4ba23c2a0b092c8f3b2c042493f8ba812795c86678b56a069b228eb88d63750b0aeab51a1e6d443ed3bc812f91591c77895a696cbd1a"}, 0x10f8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000580)=""/158, 0x9e}], 0x4, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {r5, 0xee00}}, './file0\x00'}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x82848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0xc, 0xffffffffffffffff, 0x8) 07:49:31 executing program 2: pipe(&(0x7f0000000040)) r0 = gettid() rt_sigqueueinfo(r0, 0xc, &(0x7f00000002c0)) syz_open_procfs(r0, &(0x7f0000000100)='net/ip_mr_cache\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:31 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:31 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x6, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:31 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:31 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0)={0x0, 0xda47}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5cc0, &(0x7f0000000100)={0x0, 0xb96, 0x1, 0x3, 0x145, 0x0, r0}, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x20, 0x400061, 0x23456, {0x0, r6}}, 0x7) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:31 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1265.234510][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1265.237401][ T26] audit: type=1804 audit(1638517771.996:458): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/483/bus" dev="sda1" ino=15020 res=1 errno=0 07:49:32 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) write$vga_arbiter(r0, &(0x7f0000000100)=@unlock_all, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x10010, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345}, 0x3) 07:49:32 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x5}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x66d, 0x20}, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x57ed, &(0x7f0000000080)={0x0, 0x2f4c, 0x22, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) close(r0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x3cf6, 0x444f, 0x1, &(0x7f0000000100)={[0x40]}, 0x8) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:32 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1266.004980][ T26] audit: type=1804 audit(1638517772.766:459): pid=11303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/103/bus" dev="sda1" ino=15188 res=1 errno=0 [ 1266.145813][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:34 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) pselect6(0x40, &(0x7f0000000100)={0x800, 0x400, 0x6, 0xe74, 0x5, 0x6, 0x1, 0xffffffffffffff00}, &(0x7f0000000140)={0x10001, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x7fffffff, 0x5, 0x3, 0x27}, &(0x7f0000000180)={0x5, 0x8, 0x771, 0xfff, 0x8001, 0xfffffffffffffffa, 0x80, 0x80000000}, &(0x7f0000000240)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000280), 0x8}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:34 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:34 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000240)={0x1, 0xcb, "4e107a02ac52481206643b4bef424ed7b7388e45f2ea4db9e2fa297e68e6664dd8c6c8e9ad59d353d776185e2d034142e748d35829dc2ac15e49243ed4abf4234fadfb8dea4a6177102d8d4f905f838f04b36d6bf2738a65de0d3614dea6fade17191e77b0a84fef81218f6a0dfc026f072079ae26c644ce5c561d15e7e4d0f880d0eae784d02348b88541c908e197326ba7563dac603bd64b7499e9751eb230e9643c7d5c1b3522de63aaa283eb16b498b12899e9180b6d00c1b63a3fbd1bc441ba33c92d86ac781ca8f7"}) 07:49:34 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r4) clock_gettime(0x2, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000380)={{0x0, 0x3938700}, {r5, r6+10000000}}, 0x0) clock_gettime(0x5, &(0x7f0000000480)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_create(0x4, &(0x7f00000003c0)={0x0, 0x2b, 0x2, @tid=r3}, &(0x7f0000000440)) timer_settime(r7, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f00000004c0), &(0x7f0000000500)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:49:34 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:34 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) sendfile(r5, r3, 0x0, 0x800100020016) [ 1267.437159][ T26] audit: type=1804 audit(1638517774.196:460): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/484/bus" dev="sda1" ino=15258 res=1 errno=0 [ 1267.467109][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1267.575997][ T26] audit: type=1804 audit(1638517774.326:461): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/104/bus" dev="sda1" ino=15259 res=1 errno=0 [ 1267.603061][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:34 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b14, &(0x7f0000000080)) recvmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000002c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000440)=""/136, 0x88}, {&(0x7f0000000500)=""/238, 0xee}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000680)=""/74, 0x4a}], 0x8, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x10000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000880)=r1, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/i2c_diolan_u2c', 0x240c42, 0x2c) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x4d22, &(0x7f0000000240)={0x0, 0xbb84, 0x10, 0x2000000, 0x5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:34 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:34 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:35 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:35 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) sendfile(r5, r3, 0x0, 0x800100020016) [ 1268.513051][ T26] audit: type=1804 audit(1638517775.276:462): pid=11356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/485/bus" dev="sda1" ino=15246 res=1 errno=0 [ 1268.515052][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:35 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:35 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x2b}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0xc, &(0x7f00000002c0)) rt_sigqueueinfo(r2, 0x2e, &(0x7f0000000380)={0x10, 0x1, 0x7fffffff}) clock_gettime(0x6, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100), 0x7, 0x0, &(0x7f0000000180)={r3, r4+60000000}, &(0x7f0000000240), 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) tkill(r1, 0x1) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) tkill(r2, 0x39) [ 1268.766925][ T26] audit: type=1804 audit(1638517775.526:463): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/105/bus" dev="sda1" ino=15258 res=1 errno=0 [ 1268.806037][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:35 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x3b, 0x0, @thr={&(0x7f0000000440)="11ad85cbeadeb92fd6a570bb09e6acdb3bf75c2f0a1035f3a0cf3f96a48bb8af3c002a5d74e017f5add9d3e9641ba821f30cbb012b6a38cecbe8ee927d70cdc84837ad33c46480c30cff5e6dbf4f6d2ffb259a8615b546cee48f16496a9475d0c5a5b9c211f323063f754f91e4ba63b3484283b4b0c416478842c6bb895861db71a8405cd5b25313b350c0552c05e0e334af611b572a4d9b38ad5eac2000f08190a665d9d0eba814356af6fdb486bfe7b5f40ca0d30ce1718dfd6030c89ded8601733e7af9017bb843183035c849a8de84bf61ed8dffb654604712bb379e0c8326ad5e074adfbb3f5cb47a8a86465b4c61155afe54a501e7a3880712be32e9c63a85ccbbf9d6423dea942e6a54e17ed097a7e540b31259ff92fc198ce1dcad47b12c1722ae3201a64022dcc8b4128f07297d7d8029dc5651d4c3dbbb8be7a37f9a20696295909fa6fa5dfe701c56c2b60e899794f0e26ad4cfafc2ea5b0ce2426a783410ffddfc85f0c22d7f8010a83896e38d44ebdd2db34e818d1e9063ba5949ceaee81d2468914015275915cf9efda0628e2e1553bcc4c97d03b9b5c2df4e0d2c0566a1ac47b73f94899f88427c3707e70509d88d949bf78fd4fa4f04cea9f465bd8a2a8b1c8b11ca81600e86951177f4d5a6da6cf931c7361a80cee89bc9b21d98ce3c73970689e9d22ce2e2bc81218ce7198be4dfa0618dda1072ff510d27243ca88291fa3a926bbfdc1173abf1851afc2eaf141484e334793a856c94f3449033745f7913736bac5f5a05b489e556dbeb6aca10acb3c50f626d60b2d1c5742c451380158ff2ea6aeaa2e5e371f010207b0215ce596fce24627ebf53b5d36394548272aa11407a406bcbd008e71e3ac6a73e2135d09c553059d20b38bfe539c140012503d3da8c216af2393984ad6605cfda5255f234792ea8a5cae298e7354d9652939516c9c327eac30923f2da74a8b21a1be77b2b4756def434fd1342dcc1aa17fcfc93d3114621b8b4b2b817eb771a6d4e40d3a5cdd7850ab8706107b9b751ab592e7fad82888c4686aecbd0791338eff8890ed0b4e795f32dd3644c288665b80534f9140a588b8f9631e6060134c50fb564038838f29b887afef9ad64c495f5302bcc589c146941832e4b18b2a57ec17316cd73bb7d6797f81238af92b4e33549854f0968409ae8b4bbfe33dbcf2b9ab881fc337af17ca8d5cea9ac75dcdb74d9570b4403fc8fb65f3d244c7b49d40794cbaaa43c94cd4ca87e4f994a52e9567122dc11bf31f80ee49a40e962b6426add7c55a89e68ddf5d9dcb81ececf67656af2fced91789ec4fc8c99a770cce18735fd6ae679861146cfeb665d52a9b8b2f8176c6cee74d55e04dc35aa25690695f529b0e2549f64b21c6e0c02e59a603792b7d213baf5319bda576d016948e667ff16f2482b8542410965fdd9fc7f7ada9c3f414e643d871d35a90a6c342e903e4599d0f0a4de52da9465dada6bbebef09bd2f01453b952a90e101070a23a6b7062295c948fb695382a1ef7fd354a73ba340a1d575d8eaa4a79b593593b7ace6f1a2826b19642500ce705c926581778ad2cb3bc8f9f3ace8d1c81c02fc7720a8b89eedbef787d371422f33068ddafbd3480a83f15509ceed2013163a57435bcb3661ed6a221229f59c0b660b516a8c9c37f6d6e3f12880bc2d94acdc93f4ad27c34c462ca11f4f65e18b160fc3cc44f5431473ee427e451e24eb709a023f9e7dae7c8b4c19c4747e096c4c16e6b666a2c99c9043d03bf919eeba11c7207b574b38d84ec4c41639bfb7e723ea34f009a79fd15dfb67016484b64fb407181ae9995c1176b89a44231bb1b49ece62dde458c3bd96de137c597078d4c7cc652862c0d316e77beecd8c40b1a7017ca28f3e6c49ee1d7df1d1bfd1be6f5ee71116e3a6c4442dbd13ff281d71dde01bce0a132d3a3143d300922d2e73ece0bca5a1d272e12303bf4813ac3498c162e25f45c683bb656467704e2beba426e0be20e5c70304a4e1cfb93b834e6e439e0f65a586b0539b6273fe2bc0a5314bfe93c84414382457ba1e9318e31e19082f743a51abeacd33f0866c7a0aa559b3dfedc4611cce31fdceb7b78f431fa619e5054f20c5059fdc4da74f395552b7bd6ad2425aed048a8ee71a2a5e1b56b7ba4c0eb426f1bdea589717ec4e02897881719ae703087d07767fc583c825c1837ca58921b3a6091ad2d8359fd7aa1369851f3125034743bb6ebbbc1819c78b375994e6260b3bdbec4038132b31d749e63887281120f5be5da912a02655f5d0781e4cfebf08b48d6ac85913f0fc610b781274a35ea70e0786c7405e10e5bfc664d18a97789190ec20002448faed4e4d15a9c87d15f5fccca6413ead52e9a1ae9d93a6b412d8216a43b67a679893e02ae9b78931c7028c7862e6067be8133c9f259dee54153fdef7036010a4023001b4d6251b2beb5b0a6489aaf2f80e3ffb5cd48cba6dc8b03454c8b5ff13c1767c6322bc544c589afc0b677d466fb9693ee15e1db8bc4cdef714fb5172e832bb1a38eb5486dff3514ec4fa308548372ba3e4149e8145673bf85b917b54c233d8e65aad0416b7c8c0214485a62ef20a1455b38fa5ac05f78bb600d04ba29bf81123a6354920c5618d5664a43b14fc3954f19f211a12bc182ad8858fbba479a18adaac102c15650998a2109ee170e358241822c006e0e78142ffd1c51d9553ca7a6628ab2cadefcfdb526403077c0316773e0fe427266afc445236bac3cf308f12cb501dfc8ab7daf67ef5ae71639e56c0b15208c9d3473bea3fb6b9a6b9070e0541b07c064a8405f7a2b01a072f68c7ae649a7649176a61a1eeb5d9ee0273363a2b9f73b54aeb538fb33909ba75a84f54b4eab6c0cbb9e1ef4b4fa6c9e1349b7a1e603d4cb1810051171b6cb57005f115c923411ac8b121af4c1c08fab6e1c241c0fda7e48c55a673fa2a4950330c5176e88c64921955d89dc5c110c34d6e2b5f670d60ea87ee50e490309fb765dcea0367db507157e4ec533b30cd3b52f14a4bee6a1092b509bf20a7d00bff712841c74c6e28c5b54718bf91ccf3772710cb023771b7df4805eac886bb3080c9bd7d81f59d823012c3fafba74eb43b2aa744edc124386b4f379bf1f2bfefcd63e58684e3337e6aeb39b08f83e9be0785549ac7cc39747d6d31ee49e1b68df9f4d9fccdcba691f69dc32596e3d2b03e501a5605eb8a344eb62d505e7e8507089b655cd7d8b9331a695db374fa06ff84121e4c3f8f9ea23ff292cc6e67ae35ad45d947c819340e1ba0d6b0df581a7b8d597235f2daaf485c36b41c3c03c5b6fbe2c521bd9e957a52424505dac8c2e048740482cdea1b48b8de71f0c4a93d3e572306d76a40c52b29a6c4cd48099b92029f9887f43c433fd7514b363b18356142838a1cee3ff2f891e81c45a77c395b50c1a4f12821f9623f7d8e1749f417731269212510b5b72753d53f9190d95706e31cb1ce91383ae6b305744141505b79c93753fc367ce23e5b1767626477826b944705605121036f93cff4c262a022cb2efaed88a2fa9c406564ee74ee1bb6c4235dcf5452f676d33fe65d9e77fae6ea3c4166818415dfb16ab9a261b2953948c6391a782837f6a5bdd24454227a9888532278df0d81886875773e7d0c251154feb453de9988854a48afa6ce638f62119ae61110aa9d50e85fb6a855faf1dda3c96f18ff4d5d024ab54d95d4c913d28d55f0c35937a890dc0472b0513c1450072f8bbe80e5da7e11ecaab725d4637641021890be51178d5e089872ea72471120283445cbedebd7d784f78e803fd1c5998e5d132be9b4868b7b85561bed0b14dab07094708c2e26a1af42361431d1791e6cb006c5267c88ac3e97e1c78c821d96ccba71afdaa09d84e364d6880a347381dcbc88dcbccf59c914dae8a4642f9399e23fb5efc024b26b886b4fb6fb995c379dd0cb4159e078b6e5f3e15945c6af2204d3865452a85e4af092459464628506bcbbcf9f5b5ba65190f782c3d81c28900db7bd40ab370605c5b765786eb2b30b49d8a111aa301a8be80bc54da2464fa071a54c270c24d1af9e7d1706d48ff8e63f2ecbf0d806802cb412f11aced00356af744cf2e8d65ad0de974f2eb8ea59fd4cf8d3869a29d899b2b36b967deedef39a845e9399006fd994bca4beee480e1d12ed56035a83563a29d9fd695902b20e1d92efe105f4fd4f59ed762ac51a496bfdc757fec151594058740f8e2dcd738bbe05380af179ac6ffd79de2cefb1f3601a56d76fdfdda93f6cffaa7e04438fd44381bdb10eb6218946a2e222a87b92b6031354d695775c0640c80ce08052a03f445faf6c8984d73bbc6a4532a99140785968dfccd134d6a9626804aa1bf6de195dc22c20c05ebb3a2185c9f5740ae7578aeb30504b37776b6ab43c43941586d669092cf40811134a7245aa3d3899208be1d836c04cebe63c5940eed9ac1dc8cf2f59a6e428cebc4dfef86723856758568918434a84614ec0580d144b53ca4f48b190d76d0f2f6411396971df25e00079e9bb94f920f9f8bf903d129fa0bbebc77c3bdca3506cde1b77cfaec67d2b80080ed0fc2799a6d0f1c21a4eb24f152178f7bc583dc93f6335fb1f99d3e1941e85944ec389228ed7b4f87064506400e21b946012b54bb7a52e26eb7fda4fc9dd1e3156ad97758531ad1eaccecf3dbd5653369783e104cc28fb5876ec3ec209610cef4b14d5d9022115c3ae31d1b4c7280d22db08ba6d6eb9ca0e38f00ede9f78aad5d6aed8e01a27d0150a3a2e151794c99740daf084fda30fd6aa6b37ecf04d24b7245a76e480c7f94e539ef003e7bb256f782c89789b26e6de9ee5534c2114757aeee8f23fdf204d3581cc4f4fbe07561e3668fe818a670487bd85730e06d5891152b271ad29ab4c2cfea724156580722f25e2a12e0299973cb743f71fa9922af6482ca4b9d099823e78ea7d9680822f8c4bd3d4fde477af991148f7aca9126e71db32e25791d915e966a617c2c087a909e2e26c9982686c61ad3f4298621df508fa637d38a1e1def81454c8ed01d7faa11147b39c62d49b8a94d783e97729441a8e9655325e0c717f68050a0c35851f122746164f85722e9fa1cb1183b83742640a3ae888069e26b9a8b6f4426e73bc3c8397ad9f01a36e72f73cd2a9b7cda7dcfc277077d103e3c7e39afb8a9d2f91745680d3fbbbbc7453938648814460049e3f44fdce5f44894ed339014a1a3a7247970fb950fb1941d30f77404a270592414e96a42608f5c1c8b401299894ed3e923e56ca82b0641d91d73befbd45e1725a65f62f9d043ee2e82b90e004e868c1749d2c4573661e888a95ac7fd4eed70b47cf9658364cb4cfbcad6c9cc1ebe1c40f49383201bbb3027f6b35cbf7d33a6164aedc0356824208a9844cd00e74399a20d5adb3ea06cd69ae96eac1f46d09d6db9d38d15a6d64a6a5c95716a90af0210062bc6f9495840781194be69e1abb196dd5b06895173a7aaef3f23f1275c3dbb286bf76903d24b512398306be2f7ca512da2b0d22c0beb21b41c66a9ff00af43f60ed2c3c90dc5c6ab4225cf4fbaa1edc892c69e62cd1801295654b0fb95182efa6f9a25c881952c23ee217a0b2c50058e67fefd378cb2e5c1d2d9c57eef0acd32c4f1b91c908dc7c33fbfe19e5b99462fcb53b4b4ab9b27120c73fc7686b40ea76ff6ecab3eb1d71cd7edd01296dd3a06d9f6c2493b3541a56e4ec2dec44e531a0be17e2ad413c7d42206aa397750316c1bae56bbd07e001268f5", &(0x7f0000000100)="5699747500a15e0197ebfed7b6c89a0af2fd25d8a57947398fbd289147142869c8622af6236c5c20cfdb7fec103bfbb7961fc335514016dbb7d6e37210ea725c3c50c404249eafd83ac17ee468aa1307accc61603f828821c1cd967026008962a2db65a8db770076c3956e2c5afe1c9442572d5c61f8a49124bb46fbe2e828a0abc4622af7"}}, &(0x7f0000000280)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6efa, &(0x7f0000000100)={0x0, 0x5aa, 0x2, 0x3, 0x3ce, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r5 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r8) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) 07:49:37 executing program 3: r0 = open(0x0, 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:37 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:37 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x1cd3, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x4, 0xfc}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee6000/0x7000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r4 = timerfd_create(0x5, 0x800) splice(r3, &(0x7f0000000080)=0xfffffffffffffff9, r4, &(0x7f00000000c0)=0x10000, 0x10000, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:37 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:37 executing program 0: prctl$PR_SET_FP_MODE(0x2d, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)) fanotify_init(0x0, 0x0) r1 = gettid() ptrace(0x11, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="1040003c854e410e87f19f080117010007008439c8c965300d617416d8c4d95dfdaa9b73d064c9122faabcf9d76ed0e54d2f19a40dd8054e26213cd0ea2fdcdb30c23918ef8f9602981e455b8f7a8737a81c9ab148b82efa17f88bb347566cfc4703ad8a3f328e1e1973863d85398dc3d063d3064be450edacaaba273d9ee0ee"], 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x1, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240), 0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="981cbbefda6dfa038f28febf38fc75f19c63e7636c957c8f21784d2542462256853b7174dc6ddc897d1a2b", 0x2b, 0x2008044, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ptrace$pokeuser(0x6, r1, 0x1000, 0x587f) 07:49:37 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x1a080, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/19462], 0x4c08}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x1, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xd88, 0x4}, 0x29, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x1ff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x3, &(0x7f0000000380)={0x0, 0x10, 0x1, @tid=r3}, &(0x7f00000003c0)=0x0) timer_gettime(r6, &(0x7f0000005080)) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) [ 1270.539743][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:37 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r4 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) fanotify_mark(r4, 0x5c, 0x8000000, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1270.579605][ T26] audit: type=1804 audit(1638517777.336:464): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/106/bus" dev="sda1" ino=15272 res=1 errno=0 [ 1270.601423][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:37 executing program 3: r0 = open(0x0, 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:37 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1270.917708][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:37 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:37 executing program 3: r0 = open(0x0, 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x80, 0x80000) splice(r1, &(0x7f0000000100)=0xfff, r2, &(0x7f00000001c0)=0x5, 0x7, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1271.239191][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:38 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:38 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:38 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1271.515720][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:38 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x408000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000140)={{@any, 0x1}, @local, 0x7, 0xac5c, 0x8, 0x365, 0x3, 0x803, 0x606e1f5b}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:38 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1271.750815][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1271.933012][ T26] audit: type=1804 audit(1638517778.696:465): pid=11453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/107/bus" dev="sda1" ino=14611 res=1 errno=0 [ 1271.953561][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:40 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:40 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r1, r0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:40 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) timer_create(0x4, &(0x7f0000000100)={0x0, 0x2f}, &(0x7f0000000140)) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x6, @private1, 0x1}, @in6={0xa, 0x4e23, 0xec, @mcast2, 0x5}, @in6={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xe5f}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x9}], 0x70) [ 1273.560099][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:40 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) fanotify_mark(r1, 0xc0, 0x48000023, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:40 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:40 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020016) 07:49:40 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r4 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) r5 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0, 0x4, 0x12, 0x0, {0x0, r6, r1}}, 0x815) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) 07:49:40 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_delete(r0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x14, 0x4}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {r4, r5+10000000}}, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) [ 1274.240333][ T26] audit: type=1804 audit(1638517780.996:466): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/492/bus" dev="sda1" ino=15290 res=1 errno=0 [ 1274.272625][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1274.377216][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1274.410346][ T26] audit: type=1804 audit(1638517781.096:467): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/108/bus" dev="sda1" ino=15292 res=1 errno=0 07:49:41 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020016) 07:49:41 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000100), 0xf) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) dup2(r0, r1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x3) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1274.753535][ T26] audit: type=1804 audit(1638517781.516:468): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/493/bus" dev="sda1" ino=15280 res=1 errno=0 [ 1274.784254][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:41 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x77359400}, {r2, r3+60000000}}, &(0x7f0000000180)) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) gettid() ptrace(0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="00424541303101", 0x7, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000fefffffffe", 0x1d, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x10, &(0x7f0000000380)=ANY=[]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r4, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, 0x0) chown(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80)={0x0, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x5}}, &(0x7f00000004c0)={0x18, 0x0, 0x8000000000000000, {0x2}}, &(0x7f0000000500)={0x18, 0x0, 0x3f, {0x1}}, &(0x7f0000000540)={0x18, 0x0, 0xff, {0xa4e8ae5}}, &(0x7f0000000580)={0x28, 0x0, 0x3, {{0x0, 0xff, 0x784b07596052f627}}}, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x100000001, {0x8}}, &(0x7f0000000740)=ANY=[@ANYBLOB="1245000000e9ff91758d7f8cd16698bbca35516cc8f0bf000000"], 0x0, &(0x7f0000000a00)={0x78, 0x0, 0xffffffffffffffff, {0x9, 0x0, 0x0, {0x2, 0x1ff, 0x0, 0x0, 0x9, 0x10000, 0x0, 0x1, 0x40, 0x0, 0x25097032, 0x0, 0x0, 0xe1c7}}}, 0x0, 0x0, &(0x7f0000000bc0)={0x150, 0xfffffffffffffffe, 0x2, [{{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x2, 0x0, 0x3, 0x45ffc87d, 0x0, 0x3ff, 0x92adc44, 0x0, 0x2, 0x0, 0x3, r5, 0x0, 0x0, 0x10001}}, {0x0, 0x2, 0x1, 0x7, '.'}}, {{0x0, 0x0, 0x5, 0x2, 0x0, 0xffff, {0x5, 0x3, 0x8, 0x0, 0x9, 0x8, 0x0, 0x8000, 0xed, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x8}}, {0x4, 0x6, 0x5, 0x7, 'nfsd\x00'}}]}, &(0x7f0000000dc0)={0xa0, 0x0, 0xffffffffffffffe9, {{0x1, 0x2, 0x5, 0x6, 0x80000000, 0xfffffffd, {0x0, 0x9, 0x0, 0x4abd1b65, 0x1, 0x7, 0x400, 0x2, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0xffff8000}}, {0x0, 0x2}}}, &(0x7f0000000880)={0x20, 0xfffffffffffffffe, 0xfff, {0xa59, 0x0, 0x80, 0x9}}}) 07:49:41 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, r0, 0x0, 0x800100020016) [ 1275.024598][T11508] loop0: detected capacity change from 0 to 2816 [ 1275.098343][T11508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) 07:49:42 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2}, 0xff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x129d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) write$vga_arbiter(r2, &(0x7f00000001c0), 0xf) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x3b84, 0x8020, 0x2, &(0x7f0000000100)={[0x7fffffff]}, 0x8) [ 1275.174721][ T26] audit: type=1804 audit(1638517781.936:469): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/494/bus" dev="sda1" ino=15297 res=1 errno=0 [ 1275.202812][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:42 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x5, &(0x7f0000000100)={0x0, 0x27, 0x0, @thr={&(0x7f0000000440)="f0b254f7487c5144657ccf2bce98707f5c46dce789ede7e6d08bdea3bf4c25e8fb8696a4b1957169f565fb5336145883ebf139b88abf0c76966ecf97f77de89491b42609f21f2f09c7d699f85f89fd74c7db87c873d8deeb10177b89d522529f491a97e7655184c2fd4091f9baddcba82a73b3bdeb86cb9ed1bd93075277e128134c7f4e8c8fd57cda5c89f21e0fc2fc1ac1210f733fa7f968fbe699b25119cebd0f8532e7230fc2d2e93c242c8d6fd1adf32ab529d3ee6139821938548b4010a34f3338b17320a54a722bb48110f3f7887e549bab4b8bd88017444b057751e0e03bba", &(0x7f0000000540)="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"}}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:42 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:42 executing program 4: pipe(&(0x7f0000000040)) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1275.322350][ T26] audit: type=1804 audit(1638517781.976:470): pid=11512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/494/bus" dev="sda1" ino=15297 res=1 errno=0 07:49:42 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1275.525652][ T26] audit: type=1804 audit(1638517782.286:471): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/495/bus" dev="sda1" ino=15288 res=1 errno=0 [ 1275.527798][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:42 executing program 2: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f00000002c0)={0x0, 0x4, 0x2}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @fastopen={0x22, 0x12, "69450344dd36b51b34916946259540e8"}, @exp_fastopen={0xfe, 0xf, 0xf989, "8f5a000000000000000000"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "070902", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x7, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x5, "946327"}, @timestamp={0x8, 0xa}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x3, "e7"}]}}}}}}}}, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1678, &(0x7f0000000100)={0x0, 0x1038, 0x1, 0x0, 0x10331, 0x0, r0}, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x154, &(0x7f0000000280)=0x101, 0x0, 0x4) [ 1275.870405][ T26] audit: type=1804 audit(1638517782.626:472): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/109/bus" dev="sda1" ino=15276 res=1 errno=0 07:49:44 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x17800000000, 0x7, 0x7, 0x80005, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:44 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:44 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000003980)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000039c0)) clock_gettime(0x5, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003780)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f00000005c0)=""/224, 0xe0}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/236, 0xec}, {&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/107, 0x6b}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/164, 0xa4}, {&(0x7f0000000bc0)=""/188, 0xbc}], 0x8, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/117, 0x75}, {&(0x7f0000000e40)=""/160, 0xa0}, {&(0x7f0000000f00)=""/34, 0x22}, {&(0x7f0000000f40)=""/215, 0xd7}], 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001180)=""/83, 0x53}, {&(0x7f0000001200)=""/92, 0x5c}, {&(0x7f0000001280)=""/157, 0x9d}], 0x3, &(0x7f0000001380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001580)=""/52, 0x34}, {&(0x7f00000015c0)=""/139, 0x8b}, {&(0x7f0000001680)=""/36, 0x24}, {&(0x7f00000016c0)=""/178, 0xb2}, {&(0x7f0000001780)=""/137, 0x89}, {&(0x7f0000001840)=""/93, 0x5d}, {&(0x7f00000018c0)=""/25, 0x19}, {&(0x7f0000001900)=""/64, 0x40}], 0x8, &(0x7f00000019c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001ac0)=""/91, 0x5b}, {&(0x7f0000001b40)=""/208, 0xd0}, {&(0x7f0000001c40)=""/234, 0xea}], 0x3, &(0x7f0000001d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001e40)=""/47, 0x2f}, {&(0x7f0000001e80)=""/189, 0xbd}, {&(0x7f0000001f40)=""/81, 0x51}, {&(0x7f0000001fc0)=""/198, 0xc6}, {&(0x7f00000020c0)=""/244, 0xf4}], 0x5}}, {{&(0x7f0000002240)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f00000022c0)=""/158, 0x9e}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/5, 0x5}, {&(0x7f00000033c0)=""/252, 0xfc}, {&(0x7f00000034c0)=""/87, 0x57}, {&(0x7f0000003540)=""/203, 0xcb}, {&(0x7f0000003640)=""/46, 0x2e}], 0x7, &(0x7f0000003700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x7, 0x2, &(0x7f0000003940)={0x0, 0x3938700}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x25, 0x4, @thr={&(0x7f0000000100)="f3f38857b753470c09334366ed4aa0aeebbf25ee6cfedf739a639bed3970c348e173af93b1e52d132f50", &(0x7f0000000140)="dccf50fdcf8975d7669995027604c8d46803740fc3cdea8541e982df63f38a3da759261f48ab449ec3e26eb59b1bbc77e4d31d20e9e1b977c35a8f3000d69d5a5a7f5d379a7a096e305e7ec6181a21816527365d9b43737a83"}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x4d015fffef0351d1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000003c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x7, &(0x7f0000000400)={0x0, 0x3c, 0x2, @tid=r2}, &(0x7f0000000440)=0x0) timer_settime(r4, 0x1, &(0x7f0000000480)={{0x0, 0x989680}}, &(0x7f00000004c0)) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r5) timer_gettime(r5, &(0x7f0000000500)) 07:49:44 executing program 4: pipe(&(0x7f0000000040)) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) bind$bt_sco(r0, &(0x7f0000000100), 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x40}}, 0x0) r4 = fsopen(&(0x7f0000000140)='v7\x00', 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f00000001c0)={0x2, 0x1, 0x8}) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:44 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:44 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x6, &(0x7f0000000140)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() timer_settime(r0, 0x1, 0x0, &(0x7f0000000100)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x28) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f00000001c0)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xfe, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x1869b9d, 0x7, 0x3, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, 0x0, 0x9, r4, 0x9) [ 1277.373054][ T26] audit: type=1804 audit(1638517784.136:473): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/496/bus" dev="sda1" ino=15313 res=1 errno=0 [ 1277.408233][ C0] net_ratelimit: 1 callbacks suppressed [ 1277.408253][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:44 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:44 executing program 4: pipe(&(0x7f0000000040)) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:44 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1277.531850][ T26] audit: type=1804 audit(1638517784.206:474): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/110/bus" dev="sda1" ino=15311 res=1 errno=0 07:49:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r5 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r5, 0x0) r8 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x10, 0x80c00) ppoll(&(0x7f0000000240)=[{r8, 0x4}, {r5, 0x10}, {r1, 0x2040}, {r1, 0x422}], 0x4, &(0x7f0000000280), &(0x7f0000000340)={[0x1]}, 0x8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, {0x0, r10}}, 0x9) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1277.772256][ T26] audit: type=1804 audit(1638517784.536:475): pid=11570 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/497/bus" dev="sda1" ino=15313 res=1 errno=0 [ 1277.802678][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:44 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1277.929868][ T26] audit: type=1804 audit(1638517784.686:476): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/111/bus" dev="sda1" ino=15316 res=1 errno=0 07:49:44 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:44 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:44 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usbip_server_init(0x5) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r3, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000004c0), &(0x7f0000000400)=0x68) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000440", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_getroute={0x48, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfd, {0xa, 0x10, 0x0, 0xcb, 0xff, 0x4, 0xff, 0x7, 0x300}, [@RTA_PREF={0x5, 0x14, 0x7}, @RTA_GATEWAY={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @RTA_ENCAP_TYPE={0x6}, @RTA_IIF={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000200000c0002000c0000000d00000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 07:49:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) io_uring_enter(r0, 0x96a, 0x478d, 0x3, &(0x7f0000000140)={[0x3]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:44 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1278.132249][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:45 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1278.225911][T11585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1278.232466][T11585] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1278.260481][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 07:49:45 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1278.292633][T11585] vhci_hcd vhci_hcd.0: Device attached 07:49:45 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x22, 0x4, @thr={&(0x7f0000000440)="ab1f507b89c55257941faba68b1b64b4d06431836d7913af8d5e21fa37d6d620c4bfb6cedb51348589464cbb0e018212b0bdb164550511a18ef84dffeec2a935cc17c8f67cf1da69e99fa6e2e03893b92509fcb05bffa64739d8dee22f077c9db4a777c57ceac4875280b3da9e0c7a27a88eef42e84f94302ade8073282529bbaff5607f033038ecfc0ee8f3d7b5e031416dd65770ca07e7e04dec6929dfa51e113b58df6874343f8f83b4fe933f38dfb3a2e0021f764681036871", &(0x7f0000000380)="3c2e4727a974146954d72acfa8b3e55320a366e1034bebd569fbab43280f128e12989c20c79e6fb81261e1367243983c350575f9b28d9923c8a5e482d5ba8230009f54e8bb37d8ab6adcbeca2a52935322bf302d26c0044c611d2abb19df8c58"}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1278.409004][T11588] vhci_hcd: connection closed [ 1278.409650][ T10] vhci_hcd: stop threads [ 1278.419950][ T10] vhci_hcd: release socket 07:49:45 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1278.450439][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1278.463067][ T10] vhci_hcd: disconnect device 07:49:45 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1278.489155][ T26] audit: type=1804 audit(1638517785.246:477): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/112/bus" dev="sda1" ino=14578 res=1 errno=0 07:49:45 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:45 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, &(0x7f0000000380)) r2 = gettid() timer_create(0x7, &(0x7f0000000140)={0x0, 0x20, 0x0, @tid=r2}, &(0x7f0000000180)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) timer_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 07:49:45 executing program 4: pipe(0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1278.749310][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:45 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) socket$alg(0x26, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000002657a5da0d6e9eca40017ef08150000"], 0x14}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0xc600}}, 0x91) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) io_uring_enter(r5, 0x6325, 0x415e, 0x0, &(0x7f0000000240), 0x8) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) write$binfmt_misc(r7, &(0x7f00000002c0)={'syz1', "10838e03a6f6feb29aa8ec948aad4a7a52a7e9102db8340257d48b40c7ecca8add6ad2926b363b012a1036a9add9a0d8e27f11d04ca7b2753edf17f35bc64a8ae5d41106fa5f8893baca2ddc6405ffda1c65522d5ef8cec82fe73936e6d6e6311843df8f1c77ed1403"}, 0x6d) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b14, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="0c890894f0aa08525359c2e2d7733920846fc5fdfce808561530906d3f4b9d12226c6412a37eb7acdbed4e44a8ef9092b066c52482a99d182ec7a6effac6180ff64aefe02dcf9d50d4eb5bc78d36c26ac964c4484522282721181102f5f91e42ff08e1c119f85869060809fe841e", 0x6e) [ 1278.925207][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1278.934988][T11585] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 1278.941677][T11585] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1278.984209][T11585] vhci_hcd vhci_hcd.0: Device attached [ 1279.000754][T11636] vhci_hcd: connection closed [ 1279.011879][ T45] vhci_hcd: stop threads [ 1279.022062][ T45] vhci_hcd: release socket [ 1279.039328][ T45] vhci_hcd: disconnect device 07:49:45 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:45 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = gettid() clock_gettime(0x0, &(0x7f0000002e80)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/33, 0x21}, {&(0x7f0000000380)=""/85, 0x55}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/157, 0x9d}], 0x5, &(0x7f0000000640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x70}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000740)=""/111, 0x6f}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f00000008c0)=""/226, 0xe2}, {&(0x7f00000009c0)=""/222, 0xde}, {&(0x7f0000000ac0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/188, 0xbc}, {&(0x7f0000000c40)=""/246, 0xf6}, {&(0x7f0000000d40)=""/172, 0xac}, {&(0x7f0000000e00)=""/79, 0x4f}], 0xa, &(0x7f0000000f40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000f80), 0x6e, &(0x7f0000002600)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/168, 0xa8}, {&(0x7f00000020c0)=""/110, 0x6e}, {&(0x7f0000002140)=""/81, 0x51}, {&(0x7f00000021c0)=""/232, 0xe8}, {&(0x7f00000022c0)=""/232, 0xe8}, {&(0x7f00000023c0)=""/177, 0xb1}, {&(0x7f0000002480)=""/78, 0x4e}, {&(0x7f0000002500)=""/234, 0xea}], 0x9, &(0x7f00000026c0)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000002700)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002780)=""/219, 0xdb}, {&(0x7f0000002880)=""/147, 0x93}, {&(0x7f0000002940)=""/208, 0xd0}, {&(0x7f0000002a40)=""/236, 0xec}, {&(0x7f0000002b40)=""/199, 0xc7}, {&(0x7f0000002c40)=""/77, 0x4d}, {&(0x7f0000002cc0)=""/46, 0x2e}], 0x7}}], 0x4, 0x102, &(0x7f0000002ec0)={r3, r4+10000000}) ptrace(0x4207, r5) fanotify_mark(r1, 0x11, 0x26, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1279.161374][ T26] audit: type=1804 audit(1638517785.916:478): pid=11659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/501/bus" dev="sda1" ino=14130 res=1 errno=0 07:49:46 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020016) 07:49:46 executing program 4: pipe(0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:46 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:46 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) write$vga_arbiter(r1, &(0x7f0000000100)=@unlock_all, 0xb) syz_io_uring_complete(r3) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@target={'target ', {'PCI:', '1c', ':', '19', ':', 'e', '.', '0'}}, 0x15) 07:49:46 executing program 4: pipe(0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:46 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x100, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1279.413908][ T26] audit: type=1804 audit(1638517786.176:479): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/502/bus" dev="sda1" ino=14065 res=1 errno=0 07:49:46 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1279.628040][ T26] audit: type=1804 audit(1638517786.386:480): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/503/bus" dev="sda1" ino=14325 res=1 errno=0 [ 1279.762488][ T26] audit: type=1804 audit(1638517786.426:481): pid=11683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/113/bus" dev="sda1" ino=14322 res=1 errno=0 07:49:46 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x100000000, 0xfff}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x2, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:46 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:46 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:46 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0x7, 0x0, {0x0, 0x0, r0}}, 0x400) 07:49:46 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:47 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020016) 07:49:47 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/14], 0x14}}, 0x0) r5 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r0, &(0x7f0000000140)={0x10000006}, r4, 0x3, 0x0, 0x1, {0x0, r7}}, 0xb2b) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r10 = dup2(r9, r8) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r10, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) io_uring_enter(r10, 0x41e8, 0x2102, 0x3, &(0x7f0000000100)={[0x20200]}, 0x8) 07:49:47 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:47 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:47 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) clock_nanosleep(0x6, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:47 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1280.914608][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1280.914625][ T26] audit: type=1804 audit(1638517787.676:486): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/507/bus" dev="sda1" ino=14115 res=1 errno=0 07:49:47 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x20, 0x2}, &(0x7f0000000140)=0x0) r2 = gettid() rt_sigqueueinfo(r2, 0xc, &(0x7f00000002c0)={0x0, 0x0, 0x8}) timer_create(0x0, &(0x7f0000000380)={0x0, 0x3f, 0x1, @tid=r2}, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000240)={{r3, r4+60000000}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r6 = gettid() clone3(&(0x7f00000005c0)={0x38000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x1f}, &(0x7f0000000500)=""/36, 0x24, &(0x7f0000000540), &(0x7f0000000580)=[r2], 0x1}, 0x58) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r6, 0x9, 0xffffffffffffffff, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000800), &(0x7f0000000840)) 07:49:47 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:47 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r4, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) r8 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r8, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0}, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4007, @fd_index=0x4, 0x100000001, 0x3ff, 0x1000, 0x0, 0x1, {0x2, r12}}, 0x1) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1281.174693][ T26] audit: type=1804 audit(1638517787.936:487): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/508/bus" dev="sda1" ino=14402 res=1 errno=0 07:49:48 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0x80, 0x0, 0x7, 0x0, 0x4, 0x20000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x80000000, 0x9}, 0x1000, 0x227a6c73, 0xfff, 0x5, 0x100000001, 0x6, 0x4, 0x0, 0xce5, 0x0, 0x9}, 0x0, 0x9, r4, 0x9) 07:49:48 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020016) 07:49:48 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:48 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:48 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0xfffffffc) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:48 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1281.647696][ T26] audit: type=1804 audit(1638517788.406:488): pid=11758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/509/bus" dev="sda1" ino=14325 res=1 errno=0 [ 1281.889342][ T26] audit: type=1804 audit(1638517788.646:489): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/510/bus" dev="sda1" ino=14115 res=1 errno=0 07:49:48 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xdf, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x6, 0x6ae, 0x200, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:48 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:48 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) read$dsp(r0, &(0x7f0000000140)=""/32, 0x20) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) write$vga_arbiter(r3, &(0x7f0000000100)=@other={'trylock', ' ', 'io'}, 0xb) r4 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r7 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x3, 0x4100) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f00000004c0)={0x7f, [[0x1, 0x8, 0x3, 0x7f, 0x1, 0x101, 0x1, 0xd5bfbcd], [0x3, 0x47, 0x7, 0x0, 0xfffffbff, 0x7, 0x8, 0x96], [0xc0000000, 0x6, 0x0, 0x8, 0x40, 0x5, 0x5, 0x2]], '\x00', [{0x10000, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x61ae, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x24, 0x1, 0x1}, {0x80000000, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x5c, 0x20, 0x0, 0x0, 0x1, 0x1}, {0xffffffff, 0x8000, 0x1, 0x1, 0x1}, {0x3, 0x4, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1}, {0x10001, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x101}, {0x100, 0x1, 0x0, 0x1}, {0x0, 0x200, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x2}) io_uring_enter(r4, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:48 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1281.977366][ T26] audit: type=1804 audit(1638517788.726:490): pid=11770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/115/bus" dev="sda1" ino=14329 res=1 errno=0 07:49:48 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000140)) r2 = gettid() ptrace(0x11, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000240)={{r3, r4+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1282.250577][ T26] audit: type=1804 audit(1638517789.006:491): pid=11781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/511/bus" dev="sda1" ino=14355 res=1 errno=0 07:49:49 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:49 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1282.463887][ T26] audit: type=1804 audit(1638517789.226:492): pid=11789 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/512/bus" dev="sda1" ino=14290 res=1 errno=0 07:49:49 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:49 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:49 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:49 executing program 0: timer_create(0x4, &(0x7f0000000180)={0x0, 0xa, 0x2, @thr={&(0x7f0000000100)="b382d5976e28206429dff40c8f38f26c2e699fc9ecdb8ead96e556b1156bd30ec8af5a2d574f67866de469bd7de6c82227047a4d9e71204ca4c7d3f7584290b8c0a98dfa4e", &(0x7f0000000540)="49cd3a646648c70d96f3dd9be161a91636509cb2f33ff0315600c2a279fa35ae6839049de512a6083605b4daa8607b58b9c01655d2083c74484e237c70094d4673fd9e975100d89ed21e54dab8252160f05831a607977941e7caa350648e91d185dbb71fb023e36e92072b613d541737649de3a5fa72c6c2f802a30f223f5e45c55b04e67319bcd747e92deb5b12fc3432dc814bbb87b958c3eb485f153edeaa2ab15f0d2a1e68584d561c8e4e699f8af689ed3cb6df60a8a7d5cef57be23107b5c6d2712a49dc485c411d4677abd10459c9a7184ec396cc9cd13869e6a44b591cc2"}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:49 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1282.819604][ T26] audit: type=1804 audit(1638517789.576:493): pid=11798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/513/bus" dev="sda1" ino=14326 res=1 errno=0 07:49:49 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:49 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1283.002637][ T26] audit: type=1804 audit(1638517789.766:494): pid=11809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/514/bus" dev="sda1" ino=14356 res=1 errno=0 07:49:49 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r3 = syz_mount_image$romfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x200, 0x4, &(0x7f00000012c0)=[{&(0x7f00000001c0)="92d11e9d51f0849ac629c58889601dd0426806dcfcadbbec6873b51be6381625fd7fa0bbcc833b00da467892018b492619d3a3c7b5713cd9c6e06b744e3064", 0x3f, 0x400}, {&(0x7f0000000240)="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", 0x1000, 0x2}, {&(0x7f0000001240)="5b4b20a1a5c7b928ff93fd0f1e94e99bdf2b2b8493ce1d966305c23be06565e3e3621b", 0x23, 0xb2e}, {&(0x7f0000001280)="34652688c4e8425ac29656ecf0ff5f6fa4dec2d103b10ac858f0725cc94ae773faa35ddbd8d2627746f33d4a18", 0x2d, 0x71f}], 0x20000, &(0x7f0000001340)={[{'/dev/vga_arbiter\x00'}, {'/dev/vga_arbiter\x00'}, {'\x00'}, {'\x00'}, {'\x9e'}, {'}'}, {'T%'}], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@uid_lt}, {@pcr={'pcr', 0x3d, 0x2b}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) close(r3) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:49 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:49 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={&(0x7f0000000100)="d342d619466e1ebaa1cb47503a21e262b28944245280d6649c6472cf2a510015fe88c59da10e46655e67e755519a08813a72a42fab8bb9fb3b923396abdaa0d3a1e6b106c067ad738fbd5e12d4224ccf9653", &(0x7f0000000380)="3620e0931b959c913078730e4206ce760fa2b6a1db79f8e2f9465e22312643ee95154b688f07d414dd2b749a690abff36c567030c9c6a7b6303726b86ae1509c2522296c807e4de96a521456"}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000480)) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1283.123624][ T26] audit: type=1804 audit(1638517789.866:495): pid=11812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/116/bus" dev="sda1" ino=14387 res=1 errno=0 07:49:49 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:50 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1283.276051][T11820] loop2: detected capacity change from 0 to 11 07:49:50 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:50 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x10}, {r1, 0x302}, {r2, 0x24}], 0x3, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000240)={[0x7f]}, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r4 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r4, 0x9, 0xffffffffffffffff, 0x8) 07:49:50 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1283.529513][T11820] loop2: detected capacity change from 0 to 11 07:49:52 executing program 0: timer_create(0x4, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100)="be4e60bdd45a55c8e5a36b68da4fdf3f134659419ae79a96b8066804882b891952dfd60a30e9a92d032e117b941be54e9d6025f5a093b53ed179bddd3bf1de56a64e5f911392cc1be42f7249878d009f1b4ef348497c34ac5d5647ef7cc0", &(0x7f0000000180)="3fb7af4e17d76aca5cfd80cd"}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xccbd, 0x0, 0x1, 0x6d23, 0x9, 0x5, 0x7}, &(0x7f0000000380)={0x2, 0x80000000, 0xfffffffffffffe00, 0xffffffffffffffff, 0x8, 0x100, 0x400000000000000, 0x200000000800}, &(0x7f0000000540)={0x731, 0x0, 0x7ff, 0xfffffffffffffc00, 0x8, 0x1, 0x4, 0x2}, &(0x7f00000003c0), &(0x7f0000000480)={&(0x7f0000000440)={[0x3]}, 0xffffff67}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x77359400}, {r3, r4+10000000}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0x100, 0xac48, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x4, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0xc, 0xffffffffffffffff, 0x8) 07:49:52 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:52 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:52 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x1d53, &(0x7f0000000240)={0x0, 0x5806, 0x2, 0x0, 0x2ea, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) r6 = syz_mount_image$v7(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0xb9, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="e52f5f259a1f884d675a7f612a9341098f8271f7661eb50fba097f01f7cb034a889e213f6eae59684ed0db30fd48d54bf4187bbfb4ab31197f6e13596b438bdf8e92407e5980ff3ef87805214411be67e8d8be5ed45f3e975b6758d07474d131bf1f617f1d15cf4ed02a993d3550b747c76b", 0x72, 0x9b3e}, {&(0x7f00000004c0)="a65e586d6fb8a778ef8e0dfb3bdcba8f1bc03aa373efd6cd30d39bd45f488754226f63804b4c9ecc1ea1b21115af09d57fc90287f1aad6f322056de9473347da34f95156d799668dfce65bb7471d5ba66a65b4ee02a093abcf72a82cc6259e26af7d23191f9e0ed52f50cddbffd2ce5994d315203b62f024fd09d6eada914a577412b087a23870c6f7a8ecf6cd20a6976c4db4cba8c71cbe9c4963a2585e41b683701a0a8a68d0a9cb707fa7428a140e246f8669bdb203c1acd65911beaa1d5b42f5d0d594281c1d015aa5", 0xcb, 0x40}, {&(0x7f00000005c0)="e0601b59915b5bd8cba9836fe8c77a53527c87b07f09b79cf4488424863b4ae9661cdd5f8147b4753de4b16703c19e3878823b5f686db253170598f95cc63d634243a7e2de57aedb5d585e0dec8b63561b4e5f902f3361b28ec793cfd79b4c561988e2184fcf0d3edca25ab7a65f253c4f17c0a7cf19cdc0c67212ccca9650867031d96acfa40ed4a15d0f4407c2dc69caf75789c732d21cf74315ed5f00bdd9aee515867becb2727c5295e8c0ca1da5637155b82d1e0f915b75fd9ea5a73813cd", 0xc1, 0x6}], 0x0, &(0x7f0000000740)={[{'/)\'*&([}'}, {'['}, {}, {'$'}, {}], [{@fowner_eq}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) syz_io_uring_submit(r4, r5, &(0x7f0000000840)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r6, &(0x7f0000000440)={0x222802, 0x10, 0x5}, &(0x7f0000000800)='./file0\x00', 0x18, 0x0, 0x12345}, 0x4) r7 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r8 = dup2(r7, r3) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r8, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000140)=0x81) write$vga_arbiter(r8, &(0x7f0000000100), 0xf) 07:49:52 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:52 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000004680)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004540)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000600)=""/242, 0xf2}, {&(0x7f0000000700)=""/234, 0xea}], 0x8, &(0x7f0000000880)=""/173, 0xad}, 0x91c}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/251, 0xfb}], 0x1, &(0x7f0000000ac0)=""/102, 0x66}, 0x3}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000000bc0)=""/22, 0x16}, {&(0x7f0000000c00)=""/157, 0x9d}, {&(0x7f0000000cc0)=""/124, 0x7c}, {&(0x7f0000000d40)=""/214, 0xd6}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/223, 0xdf}, {&(0x7f0000001f40)=""/161, 0xa1}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x8}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003080)=""/155, 0x9b}, {&(0x7f0000003140)=""/24, 0x18}, {&(0x7f0000003180)=""/25, 0x19}, {&(0x7f00000031c0)=""/172, 0xac}], 0x4, &(0x7f00000032c0)=""/4096, 0x1000}}, {{&(0x7f00000042c0)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f0000004340)=""/229, 0xe5}, {&(0x7f0000004440)=""/48, 0x30}], 0x2, &(0x7f00000044c0)=""/127, 0x7f}, 0x4}], 0x5, 0x10000, &(0x7f00000046c0)={r3, r4+60000000}) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) 07:49:52 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1285.944528][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1285.944546][ T26] audit: type=1804 audit(1638517792.706:499): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/517/bus" dev="sda1" ino=14898 res=1 errno=0 07:49:52 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfff, 0x1, 0x80000000, 0x800, 0x9, 0x7, 0xe2, 0x2}, &(0x7f0000000140)={0x10000, 0x7f, 0x5, 0x400, 0x400, 0xffffffff, 0xfffffffffffff471, 0x4}, 0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000240)={[0x3f]}, 0x8}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x5b, 0xff, 0x0, 0x0, 0xff, 0x10848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0xb, 0xffffffffffffffff, 0x8) 07:49:52 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1286.064502][T11872] loop2: detected capacity change from 0 to 155 [ 1286.116724][ T26] audit: type=1804 audit(1638517792.806:500): pid=11871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/118/bus" dev="sda1" ino=14920 res=1 errno=0 07:49:52 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1286.161551][T11872] VFS: could not find a valid V7 on loop2. [ 1286.270569][T11872] loop2: detected capacity change from 0 to 155 [ 1286.299483][T11872] VFS: could not find a valid V7 on loop2. 07:49:53 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1286.315048][ T26] audit: type=1804 audit(1638517793.076:501): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/518/bus" dev="sda1" ino=15108 res=1 errno=0 07:49:53 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1286.555594][ T26] audit: type=1804 audit(1638517793.316:502): pid=11901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/519/bus" dev="sda1" ino=14645 res=1 errno=0 [ 1286.636708][ T26] audit: type=1804 audit(1638517793.356:503): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/119/bus" dev="sda1" ino=14641 res=1 errno=0 07:49:55 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) rt_tgsigqueueinfo(r1, r1, 0x25, &(0x7f0000000100)={0xd, 0x6, 0x7}) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:55 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0xfacb, 0x8, 0x0, 0x32a}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r0, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x10000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x401, {0x0, r0}, 0xe97, 0xd, 0x1, {0x0, 0x0, r6}}, 0x7) 07:49:55 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:55 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:55 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:55 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:49:55 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1289.030465][ T26] audit: type=1804 audit(1638517795.786:504): pid=11922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/520/bus" dev="sda1" ino=15325 res=1 errno=0 07:49:55 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1289.145139][ T26] audit: type=1804 audit(1638517795.906:505): pid=11927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/120/bus" dev="sda1" ino=15327 res=1 errno=0 07:49:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000100)={0x0, 0x7df8, 0x10, 0x2, 0x44, 0x0, r1}, &(0x7f0000ede000/0x14000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r0, &(0x7f0000000280)={0x208080, 0x0, 0x7}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r5}}, 0x0) [ 1289.279730][ T26] audit: type=1804 audit(1638517796.036:506): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/521/bus" dev="sda1" ino=14961 res=1 errno=0 07:49:56 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:49:56 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:56 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1289.557768][ T26] audit: type=1804 audit(1638517796.316:507): pid=11949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/522/bus" dev="sda1" ino=15330 res=1 errno=0 [ 1289.677429][ T26] audit: type=1804 audit(1638517796.366:508): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/121/bus" dev="sda1" ino=15326 res=1 errno=0 07:49:56 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r2) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x81020, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:49:56 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:56 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:57 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r5 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r5, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x7, 0xa, 0x4, 0x70000, 0x2, {0x77359400}, {0x2, 0xc, 0x9, 0x7f, 0x80, 0x40, "3420fc42"}, 0x9, 0x3, @userptr, 0x1, 0x0, r1}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r9, 0x6, 0x0, 0x7, 0x6, 0x1, {0x0, r10}}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r11 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x22000) flock(r11, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:57 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020016) 07:49:58 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x2d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) fanotify_mark(r1, 0x15, 0x1021, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0x1}, r3, 0x5, 0xffffffffffffffff, 0xa) 07:49:58 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:58 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020016) 07:49:58 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:58 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c200) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x8010, r0, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000100)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x80) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) close(r5) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:58 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) timerfd_gettime(r3, &(0x7f00000003c0)) r4 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000440), 0x38, 0x100) mq_timedreceive(r6, &(0x7f00000004c0)=""/242, 0xf2, 0xffffffff, &(0x7f00000005c0)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r4, 0xc, 0xffffffffffffffff, 0x8) timer_create(0x4, &(0x7f0000000180)={0x0, 0x12, 0x1, @thr={&(0x7f0000000100)="b8c744ee97b31164bea0e24af2967dcdc598edb5b69936104c535875fcf26ac4a74dd4e9b4d84ca6e1160de54180d1f56eb7e66d2e4a09b618297f2d03cb9d00d665fc9a532cf983b1f9438708b0dc3dd1115e17f715a2d05a070eca78607522a5597a783f6441b25d14f7e60bf784a20aae0d", &(0x7f0000000240)="73f93af33f790c29ce24f93a68ebdaa9ee57db0b3250a27e1c75dc77b4c3c83bf4b212e4d13462f1203195ada9ea90d58480893c03806cc22bab0fe85ded1db9e8a56a836eddea0570fde66cd61f1d947f2c5d4041e3031cf6ffa71dd60aaf4fb8c8c7c1afe4194269fc6c"}}, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b14, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000600)={0x0, 0x9}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000680)={0xe89b, 0x3, 0x3, 0x6, r7}, &(0x7f00000006c0)=0x10) [ 1292.082308][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1292.082324][ T26] audit: type=1804 audit(1638517798.846:512): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/524/bus" dev="sda1" ino=15361 res=1 errno=0 07:49:58 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:59 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:49:59 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r3, 0x0, 0x800100020016) [ 1292.208934][ T26] audit: type=1804 audit(1638517798.956:513): pid=11995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/123/bus" dev="sda1" ino=15364 res=1 errno=0 07:49:59 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:59 executing program 2: pipe(&(0x7f0000000140)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1292.440057][ T26] audit: type=1804 audit(1638517799.196:514): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/525/bus" dev="sda1" ino=15364 res=1 errno=0 [ 1292.481410][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:59 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1292.613403][ T26] audit: type=1804 audit(1638517799.376:515): pid=12017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/124/bus" dev="sda1" ino=15373 res=1 errno=0 07:49:59 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:49:59 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000240)={0x0, 0x0, 0x20, 0xfffdfffb, 0x3}, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1416bf00000000001000"], 0x14}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, r5}, 0x6) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b14, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2b, 0x4, 0x1, 0x218e, 0x2, @loopback, @mcast1, 0x80, 0x40, 0x91c, 0xfe}}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002a0000022abd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="10000d1a9b4e0ede19a7a8a2fb0081e2090007000f00"], 0x24}}, 0x40) 07:49:59 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:49:59 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1293.161552][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:49:59 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f0000000100)={0x7f, 0x7, 0x6ad, 0xed9, 0x1, 0x7fffffff, 0xffff}, &(0x7f0000000140)={0x3, 0x5, 0x1f, 0x1000, 0xc8de, 0xb42, 0x200, 0x401}, &(0x7f0000000180)={0x4, 0x1000, 0x1, 0x3, 0x7, 0x8, 0x6, 0x3}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000280)={[0x5]}, 0x8}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:00 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:00 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000180)=0x307b, 0x0, 0x4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x200202, 0x0) r6 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) r7 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x4001000) write$vga_arbiter(r7, &(0x7f0000000380), 0xf) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) io_uring_enter(r9, 0xcd9, 0xc17b, 0x1, &(0x7f0000000400)={[0x1f]}, 0x8) r12 = socket$isdn(0x22, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000340)={0x70000005}) write$vga_arbiter(r10, &(0x7f0000000280)=@other={'decodes', ' ', 'none'}, 0xd) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:00 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:00 executing program 2: pipe(&(0x7f0000000040)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='yarget PCI:6:13:0.2\x00'], 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000240)) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x20010, r3, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x951c}}, 0x1) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:00 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1293.638699][ T26] audit: type=1804 audit(1638517800.396:516): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/526/bus" dev="sda1" ino=15347 res=1 errno=0 [ 1293.642766][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:00 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:00 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:00 executing program 1: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000700)={0x0, &(0x7f0000000640)=""/158}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={&(0x7f0000000440)="50b0839f259b23400eb05bcee478ad213563e6203d79c5fd9e51a2d4f91800845c01c3e389ae89626a2a91c54165c5e45c774857890c7aae776a119ee092cdae5b04f11d70167155ac57f5b46ec6c578eeb87be88a4f9b621c757ce97d6b0be6c4256023f4f27d4334e6b8d8e7c95d6a249e4a5ddc68bcc95c1ea30a8049c1a136a0c68f9ce40d445a6d9696f0802d55e0018acab412e17a25efc981f864e6b4c77050bdd738dcdc4279", &(0x7f0000000500)="e7a3ee8169ee8584c26c4202aac676166c42a6ea2c86017dd8af010e78e82d797a612de4356487aa0851775bd83140db56199cf91457000a29b213737659d308bbff7928b21cf2bb40e260788f6cb06a2e95f747e7b638ab6de9dfa32c808a66e1e4838eaa1349ad33cc1c134caec9dad8c694394af824e0814bf225e5555a1f6220c1c2c318a706"}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r1) timer_settime(r1, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, &(0x7f0000000380)) r2 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000400)) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x1, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000005c0)) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @thr={&(0x7f0000000100)="4620c55e745dfd9701a4f085901568747f762aaae7ae", &(0x7f0000000140)="cd6fd313b957079bce1c1009e82597240dbc62cb3c4465a467a11a06811b28a472a8208c3b0c3b8af78138054bd88db0bc2bf6b6b0cdc4afeb73dd754ffcea0bf41b355066a9a92496bad8"}}, &(0x7f0000000040)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) 07:50:00 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:00 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x2f) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:00 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1294.372167][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:01 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) wait4(r2, &(0x7f0000000240), 0x8, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)) timer_create(0x7, &(0x7f0000000100)={0x0, 0x18, 0x0, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:01 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)=0x3) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r5, 0x400, 0x0) 07:50:01 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:01 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:01 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1294.750348][ T26] audit: type=1804 audit(1638517801.506:517): pid=12091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/527/bus" dev="sda1" ino=15383 res=1 errno=0 [ 1294.753711][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000015c0)=ANY=[@ANYBLOB="34000000964296c4598ef2f406d3708b2a92cf2eeee553b82fcc3d0d", @ANYRES16=r0, @ANYBLOB="04002abd7000ffdbdf252e0000000a000600ffffffffffff00000400d00008004200020000000500180140000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x16) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r2}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000440)="8a2df58f6d393647fc82b84b37de2a1edca399a32ac6fcc381086d9d3470890a7d910e0e0372070307b4c1dad3f967b3d807ba578c5bdf06897c28087f43118fcfa4f4954a68dba2f3252b20e6590571a911870494b6e270382a648e64fa107f0422ed6c6411e417bf6914952d987097b94086d477680f753bb040a8b0aa33e2c50b8cb45d13cc021dd6542c4c0888f059726027fd089296d1f3cb896be104acdaa898f23868cac2e153234a16758fdb4f478959236a233f32f2da98b23d5aaf3af7b2fcdc87974650c137211579ea056ff54f3cea5474d4e632b2b09b983b5d7617a1b4123f98afe663dc84137e524e2873f0ca4c8fc49f07175ae32c56096fbeb69e35e9561d508d89239d509f9e737fe0fe052bea0e276eefa12169714bf70f1824eb1f37a5a9af0d2ce59a561440195468dec3347c15e38ca31155026c8f731b8f663341902b0ff2927a36c17a155203cfa37e341ba229250a76911e6abf9a135dfdc7a75469b900330bce6287e69138df3fcb29606f09f82abcbb734608d22ed0625c048863589554597a5c5cb65f367e1c8b6720217f7aeb2fb3a5aa8f1a9ad7ffe1e4c031372fe7c35a0bdb3571e3204ba0f8c9d25d6d5c1de013cc88d41d4c49ebecd09d3777fc350e8ceff47800d05320eb7d148a3c47219bd66981f3f51fa3ea8c69af02f46a1aac45355b711a7314173dcb7e9b3683925f1c77d8016b21e54400d52e768b844950b9d7be6a71b9a9be0962a3362e59d546c55f6fb752e28fe10e83a9b3b18ec6316b99ffd4b6efb6dd3940c208a4717c03c901107465ad3ff73f26d5b3c7d41ede228d1ccd00fb328b1f18c53a98103e6211c9044248923cddb57c1825e2714254bb3d466233b687c3c46bd672269e687b576d04789f47e2b2d32d6724cad3feb623271e0f8d865cbd3b0b12e0809dd49c8cec2b5a53ccc884670a1447aa9ad188b81753a1a29e6bb6c355f85b9cbe4bbe6b8bdf575f50845d850f883c710389b550ab85c95bf2c4b2fa610b4e781face0426fb5ff04b42d66eded9aebde68932a24c6c3f3541c1cab7d223aa3ce7ed6fbb1f210040a0cac7ce200acd2bf819a08eff8c71f8ac4444f673f072050233686aa6811b61d6e96315550b2646e4f6e4f31cacf64068fcce455e269dc66622a5f6dc81016766b01f675e92726e42985fb55182983652ff9cfbbdf2eec0eab0174e7914bd36b35e589a96fa64f5d3561dd018549e4414dbe26ecdceb08c604dab4a0b24c5e871fd6be696d1ae39e0b38bf90988759e17e0a162ee810f4c7dc290022b29a3a9ef3b99e4e661a0472fbd49517a13f2f2af74afda00a343a52212bf0f277b166fe9f66130a2d0ef88ea88cae46511c18379e1badbdf51881672ebffdfb587eb399be4ec83a5dbaa1a2d19a093cf8ceeb7d203f94870e6d15d60e1c39d4b3e15ecb54fe016bae59698a92d8e2d6e663f32455ada445b45e1a2fdc62add478cce46cd3af302005777e1d8632c3769ee01186708e81ae6adaefab8feb44b8b2bec484aa7a584d04e55d47800e7094c9392b8a8a823fc1f4855ea97788a2732e1995a44a73f9a4ea55b97157fcba4ba6fcbd8c15f4eeeb4ca6d4a8337b263d703c9cc7d02ecca9958f9c968d35454d9f87024d3dfc10ff2c76bf551b0f02c0a00cec0720754a3d039cd8c9e5ba4b8d3e809b35d17fd9b714a0b315b15ee55f1ce387c266d5ff7ab92f16ab9476e72d39dae41d85632a7fe09f3497f724e41c4bc9bc601950eedb2519e35465e4e2241a680b3af57c89d34c3d3a3e766e26f5685221b746a5a79f9c5617afa896d451285583fd370ac156640af627d651436db63ec243a8b333b3cef1cf1db991b359594128d63085a9922c53f09ec96774322b9ee5c5b3d77b6f4955b9583fba0f0b7ba613e1a055f87b87a7b4db1d7cbf62a5cd44373607653f6ec744e0437f789a3a4da359e89adb39ab0ba6dda8dda7235d5d192b2346493e9eb114241782acf00cd4432b94b484af1272f5fec1eca30e5eb5fe6d4f3372f927525be8db17641aea24721b00ef31296bf0aa84cb5aa2ddd912ebd11a5a28495d63fee8768e5f6ba80125d5808dc1db65c1f61a8648169a79986104f344cc9899c43e40cfb6b47ca3a5aa3a6a307fd7eb1ae1bf7d650695bf5406fff493caefee51b036120c85c734987c19014446b1d3d6a839db98894c028f5322634b15ef645d999eb38597958acf75615f567128cc4f58feddb68d0cd70ddae624f9bf074ccdf5c138d3a46c01161c0505485e8adc5e2cc774798fc3ecda7268dfa2c1a7d5f03247b40052a6c698f199e4db4d1a9d89f62042f153f0671eba770919bae0b12a282d0f6c5346046ee38ab9a5f5b3198e5ca40f5c3a5fafd058eda6ec01899470b9760d31816d48893f89f08ef5667e86fbd2717e8a92347fc8bc8ffa941b7f2462018085a549da969f00c5094674ef320c31649ccbcfa744c8f5044d37566b02588350cc96b5227be69e000344f80e591a5a4fd27755888faccbb0b56d8373c3e3c77ac9f245155a8ad77ece4ade90a1666194f86ca1abbc5ae3ee01bfffe1e9823dafc2c6c326e7acd9858ecaf58e99f490c297a1e25f472f8fb24e319642afa4bde2bfdba774e247d062aecd0c45870b6c305fc90cbf22ce62abade7fbe0f40ed45e49cab71870d7a972a1f825b1cb180998f76d09e489dc9a4d188f1b0b6da6afb2f64bac3290f5eafcb2ace634a1c8f294839f7fe4e934966135143f09d3e69c5e1f68b605c2b1f9439f678831484cd6f2cd94263a8cc1769155cd632ec3663f51ea18c4e0d7d8b1576b343f2626020bdf27a902a6f3c1c2470f48e425045724b3118dd8a4ea705caa88fc4ac86000196ff3daf56b20e935d272fd6c4a6942f571b4ed6179fbabadbbe1dfd8731e48ae211ca6cc57012ca432a617a8428e8adcf0f46315a3d092db71afdc24c0d7030885c55d405b88eb9f1e522764bacdd9c447771344870a8199bf31261db0246f2123e9559bfc7be13c642d9ebc5ef6bd1e78b627fea53c3cd0a7f15fbad1892de96de895cc466b933af487905d824a6acb8e2f8df7d85aea3cf1be415b6a636b84663f0222ba0c771ae4bcbaf8b4296301c538f0a09500ef3adec0bff09d359b5a15eee25591772a919c04473c79638f00d644735abf2c26a651de6f6bec24e4a931a5db80e39b4ee1cb114ce5694f531177326dad71897e7b673dc3617282a86680ee703ca8fdd81749ac1191ba82d60e4bf060227faaaad9c3c7d97cf2463cb473fb4721e042b83ba84ffd5efdd61fc834c6668062f602f2ad781b07db4fc0ef79bcc30b596bc69628a8064826195b53d51c7b7fbc4127eca3624a36bdd4272996bfcd9cd434d5324f2db49ae194ebe9eb152e6af68653600aaf0c2e5ec4575217e458d2baff202ad166f140a353c6dcac34abbcb4f34518c9bf7d1ef777db2c633012ec3e07e99d8b2255830b0e214e4442e7770501dddac9b1c9ff80c09593608e45afc364639ae8c5bba0e4ac09f9a4e0a5fac568219d32952af908916c28f8444e58e39bc673bee1f97bd993d3969f7c520d10d8854b9477f880873241e79517b25197a620e0b07b7ccc35581f0786e9a576ff5af71bb7b03542da0658c8dbdf179baf40203b2f912b073f58868e9e8cc027f8b9f30fa6dc8e2385ffe1fff0ddc90d7424b94901f55c400c32737301069468f6cac8711f24f2cfa82732cb47af11e6a0a576f95fa1ce95a000ca98dd842046987fe191132e0528b829420c0692e2866c222b850621584ebde8a148467af9fba34dda91daae8bb218a75c4ca20a7407459f93636bf02338ebd13b23a477749af6c0a1a9cfb14005a77a30443799dde3f3e73d4107676e27f53ede0e4a878ceaecff340a8c47808d29119577e239adec6658a31625c3f3ad43725dfb57853c26b2ced8b731ff3d64de45183ad5a29f0c1a87f36a074e70acaaea33062085b8475286e1ffa0706b1a01d0b335f5683e36ee2aec9320feedaea66a072f0d4f3ad6c7d5e6721a9efd182c2301b833790da3c2479abe21f3c2f873d81159325d8b3b97f39f2087c457cfc3b499f46272433d66cee2111d31b6ad517f357ebca7d290914b7f3ac1381dc0dcdcb43e9424a5018950bb8ae0108d03fed8f277d36c12457d6e14d9fd2129339e7dd81b040a8653676ae4023ae0f6b2cb73fa31681e8930486c8c36c5b526e10d13fad2e2711449ceccf2f0d6844b219a93641c5a6604d36a474747f01396ccec4d90f6f2a25a47e90c2a05707d8723e0f0ee42ab8ef661dfab716cd5a3e1ea241f9fc02b6a727a2e9c6c63da8682487300935c7cbc1aa40ef761bc1cd04ef06c3f7e949565357bacb521c9c55c114fc60bca57159b63039f0fc81f294bf7f6401392ff745ca71e718e49a4541319d6acffb9a13586861d7c48922f361973492ab4c0a671e4af23e2b7d3509c03908d28e2bc1fdd08e843985dea9ac2527490b4aa48115ed34382d0b287aeccec405c19636a53cb544c9eba7c5f62676f341202e0d7e2559d79876936b816cf5a62356611f1d92198727c1e2fdb03272caf9fd9fe3e41e179042ad6bf66ebd7944bc6e1d7abd75603b7acc8b05d061fdbac044bdd9f6aae3cec70f696cc4d69486254b58d95d770ec9efe95c49e04b4fc2fa0cb3d3c904c1f953c01720edc5df8dccdbb60434338a004683bd0453b141b8c2ac3a345caf559a00e8c4b3969238af8442e4b4dc81c2250227be0bfad1045e93b615c82ac91c387ca5c4225eee21cf83b689d0fe985b0825aed4a467aa49178f81bc43a8f44d492a1a56fb39a7ea6c61d345ebbe02c292c01a9c3b674c0081e925ddc17b1881b3ed66e84f10b98b0011afabbda566098a90a57b724a14dc9056c801b1b9ecdd8f70ee5553b81552968a8eb133a0940e1d9107a09573fda272a25eaff05534b65d6d84a0140f935ddda011e0f7cfae9b40a957555fa2724f55527a3951640fbfb0440fc843a3e17acdfabdc3d5472d6c08169de0b6fca6f937c00d18da89ae1f740056879c7d8e4aaaefb13c56ea4aed650dea88da9d49284dae9e1b63225b44cead2352ec01bbf603c26bd27bf9f31f92d0b55d393297cba56e492bf41406b766a392ea5e6302b9869ca2b4f9e2d3a88246776ceaffa91c4061d5b085e3b53f72bb1f759ad200126d9ebf9ae20b64c5e79a098072ccf6bcc96335db2f2514662a4d8b7ca8d7bd0d158e49d27342d4dec1fdde636a31a5690a6412e8cbb4eb208b71b98a05c78b5679fb26c3abd502454f674577884719bc973935cabbaabedef04bbc84d59f4436bb45208a61fe35b34a86e36359b024ba96e8eab6721dacd2c36da47fc04c61464526e8a0ee8e194479abebd5ce6a1ad4cbee18cb320aa0f5048eba096213f25d2c8e212c367ca3354735f34447def05944988f95207501eb300269e0e798169dd4bbbc18d8d89296cf9b3839234dff76c6488045d916edc1d6a24a12121fd72df0e0b722896b22d0a74fffecdaa9a2c5b39340768e0eb4dd0c426d985aa0cf36d92c27d9e4b97dc586066813c94c23b8d519d8f3e791610ed6c05ecd17050596311c57fab7b0f73968420b976789ec1ba0cb94020d4c5f0d4b67c200b2585364ecb0fdf3d7641fe3563a465de1b000a2d60bb76a6ca0124b7f59ce40b13021761e7a7f1178ce6d41af1ae7f7ec11afc61fe122f1f58a8fe9a0a17f3284034b34dc4684a85bd827377368d926c9e518f19d1d28aa6adb6ba8c568014f9", &(0x7f0000001440)="15f4a9f5c6bd608be861c2f4f7d6fc664ff8b3e21717b22f092dbe60753db2cddf956897754cf0042849757b98359d76be05ee50d8cd89852dadf537bed04c8cd61841c559cf682e5e87492f11ec9190efdfe0981ac278a96e0fdd78c5a58e44db564cfa760c8fc29dae6db482593d90cd577378afc4ffe3c62a95944158542378b40fc54fddaa103ef8c1d980fbed0aaf47a384c1ece685ddd0b3c59fa7a3372a843809df4d0e4e153c2c4acf06b64a3d6b27173d78c9382ae65afe13ff1c27e418596a975d16609e588d"}}, &(0x7f00000003c0)) timer_settime(r1, 0x0, &(0x7f0000001540)={{}, {0x0, 0x3938700}}, &(0x7f0000001580)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x2f, 0x0, @tid=r3}, &(0x7f0000001640)) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:50:01 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000eea000/0x1000)=nil, 0x1000}}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:01 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r4) timer_settime(r4, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:01 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:01 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:02 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, r2) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x1, 0x10000025, 0x2, 0x5, 0x8000, 0x3, 0x9, 0x0, 0x34}, 0x0) 07:50:02 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:02 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000240)={'syz0', "f8b0ec0c6e8e6835a087f455975129a9e229b4cebb445a642c7228b7e68c72b73423ee2d3761302fc53f225116cdfb540c5b5facd522ac0042f8b0d5a457f214bd97897010f3b82b36536b408a490b8a62cc4486e6b19fe50d987b77b6b684af09ebc137e1f80fbb89a95b39ef9bbefa7105cf1f014a845a6b5cb705d5b81cf4314dce2eff5721a91fbec7dfbfdb2647967c09673efc68f352d465fc7e981ee0a0134c63b6929c6d57f219ba50386c0b7715f8439c9e46578af1f46dbe810b681c739e71277c00f249b4740703184b204e3a3a4da1080d9f1b1212f5af3fa6"}, 0xe3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x778, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450f, 0x2, 0x0, 0x0, 0x0) 07:50:02 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x6, 0x1, 0x64b300, 0x8000, 0xff, 0x4, 0x1cb8, 0x4, 0xa9e0}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x81, 0xb, 0x7, 0x7, 0x1, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1295.551814][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:02 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:02 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:02 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r3 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) setsockopt(0xffffffffffffffff, 0x7f, 0x8, &(0x7f00000001c0)="51c48a1eadc62953ac7bdf7861ac6b30b09394f16f82b9e18938615e4150cfb61de7c43e4f7e1e140060e351", 0x2c) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r7, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x1, &(0x7f0000000240)="2bbbcb189dadebc9ed8fd11a0c1e38eca7a1af3326b3f146153a41a6373eeb0686d0cd753604f57dc73fa2c3d271bc16e4264c65fd50072dbc8e8de5c432dc584a", 0x4, 0x0, 0x1, {0x1, r11}}, 0xfffffffd) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000100)=0x4) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:02 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1295.886987][ T26] audit: type=1804 audit(1638517802.646:518): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/528/bus" dev="sda1" ino=14999 res=1 errno=0 [ 1295.888665][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:02 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)={'syz0', "082f20abb0ce2e12da127c899737e0161cb590815a438567a3"}, 0x1d) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:03 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)) fanotify_init(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_create(0xfe4b725e6ba3e87c, &(0x7f0000004080)={0x0, 0x1, 0x1, @thr={&(0x7f0000001e00)="eb98d27d2d16f02fef", &(0x7f0000003f80)="45e17f390b36a40d42638e5a00f06ba6587a2ad464fa8c1577210be10fe1015d75772ae7a746666baf856c0f7b45cd33d058bd1793cf404c4aedb8efd745b657d45a6d4b3432e81ab7f5c0f884aed60bf1f752ed37f8dbfa8a7e9d0861e67ec3e5990b1fada53a934a3c877e60071ef710f9200be58d75e5770b5093a91921c9a91c1ab8beb38fc0204bcf6de2eeecc7f2b0927ddb9fb64a5ca3df5f8d1533cca2f74af67d8947a329fe5fec761a5ef4c871f2e63392f3df73cd2a1f4b2069340f5f7ed8d0496ae6f774761c7be5a94e4bb9d2d288e734ca0786ab2e58b6260057989e17d158e55d99de7a8dedce86464654705f1c2e3e9fb0"}}, &(0x7f00000040c0)=0x0) clock_gettime(0x0, &(0x7f0000004100)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000004140)={{}, {r4, r5+60000000}}, &(0x7f0000004180)) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r7 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r7}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r7, 0x9, 0xffffffffffffffff, 0x8) 07:50:03 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:03 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:03 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000140)) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r3) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) pselect6(0x40, &(0x7f0000000280)={0x3, 0x73ee, 0x1000, 0xc32f, 0x4, 0x4, 0x3, 0x6}, &(0x7f0000000380)={0x40, 0x6, 0x6, 0x800, 0xfff, 0x0, 0xb7c, 0x101}, &(0x7f00000003c0)={0x1ff, 0x100, 0x0, 0x6, 0x3f, 0xe53, 0x0, 0x109e7468}, &(0x7f0000000440), &(0x7f00000004c0)={&(0x7f0000000480)={[0x2]}, 0x8}) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x2, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:03 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:03 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000000000000000000080080003400040001608000100040000220800044000000023f40d74c45607d57805ba3db0bada4b7077f76c581e9e835e91026dd1d1472c5000a1625df47c467af390ccb29e2397b31300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x1, 0x2, 0x6, 0x81, 0x1, "db12b30d5d0e396f61f9d66787228a59cb0d006962bc9fb70a7c0cb45e6c9eaef19f9a97c15597dd87e4924f8f83f6a5fb38a8dcecdd08d08fe1d8b4513500", 0x1d}, 0x60) tee(r0, r4, 0x401, 0xc) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:03 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x1, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0xffffffffc0be37ad}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1296.696835][ T26] audit: type=1804 audit(1638517803.456:519): pid=12156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/128/bus" dev="sda1" ino=15396 res=1 errno=0 07:50:03 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1296.739092][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:03 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:03 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3f7f, &(0x7f0000000480)={0x0, 0x9f84, 0x8, 0x2, 0x338, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000500)) syz_io_uring_setup(0x4b81, &(0x7f0000000100)={0x0, 0x4c62, 0x10, 0xffffffff, 0x6e, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000540)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x6000, @fd=r5, 0x10001, &(0x7f0000000280)=""/167, 0xa7, 0x12, 0x1, {0x0, r6}}, 0x8000) [ 1296.945846][ T26] audit: type=1804 audit(1638517803.706:520): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/529/bus" dev="sda1" ino=15392 res=1 errno=0 [ 1296.982688][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:03 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:04 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:06 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1b, 0x1, @thr={&(0x7f0000000100)="9eec8f328c7236662951136f1b9ae7169f1326e99fd326b21c7cf7a2765e1722dce8c3fcf7eac46ce97d7a0fa71af852798768728db48e82714baf08934bbb861ecd55ee9289d04246ae67b9fe43d4f9fedcca55c51ac7a75050a6fe385d4e2f12a2d05aeb7a790c3bb7", &(0x7f0000000380)="664bffee416a0c084c0060712d71a9d35965dba0d3374d537ccd639f4121ac1990a079af1d494db54ce40e55eadff4d114dc40fe337aa3e765a53e392542c3a7072c2b2ded6b2077dddb2ff6ad3d0ef23dc036d6ef9396c4cf398b591914345dcbf5134ab415"}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x77359400}, {r3, r4+60000000}}, &(0x7f00000004c0)) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000580)={{r7, r8+60000000}, {r9, r10+10000000}}, &(0x7f00000005c0)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) 07:50:06 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) syz_io_uring_setup(0x6bb4, &(0x7f0000000680)={0x0, 0x591b, 0x2, 0xfffffffe, 0x71}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000640)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)="a6ada55f513fc8da96fa7297c497dad85ed5ab66bfdb215425307d5ded3af2a9468af6335a9357d8c945540f578940b5e546a43a4d3f259867c8e5238d7bd36b33f9341e50ad2c0b5f136b7abcdc3ea51b366730f27485e09558d3dd48890a7b0d79986431e0e8c002cc4314ce4be4b2572c88e9250b28642b038493e7fa63814e9a8923100a6f6600d6d141bd7558e74eb7e2665c8c99628cd00d2e72a8eb06519aea03ff132cc7aace866cc9bb613a167b573f9aff964c570b07a0b1e85f1ebe55f72789579d8183", 0xc9, 0x4000000, 0x1, {0x0, r6}}, 0x7fa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x6ae8, &(0x7f0000000340)={0x0, 0x6053, 0x10, 0x2, 0x3d5}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x81) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8b14, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="4e000000ceacf847e3b913bfb547d5bcdbbdd0e86bfcc452ca6160dd9c9d75cbf923064fd7d2e09683e3bea4015e86f133bbcbcc6d9deee7abae55c9a0e814a5e53e3fd13df5304863ce2f84f1637ecf13b5c730007ec794965f4eba0a4fd4d62e012b3022a8e7fa4436deffb33888760e71b9deb097de539785fe01b7eb94390628c29f71600be9538d222ad5f2fd520691c16ff48a469e44b8e7025e27195e1439bb78ed5cee62aa3a9f56f4450e77f650ad7999152a22a51085062086ab7cb075241b1f5406f1fa307f02cc20af438b1473b8c6efd708d37295a923762e49a58e0c6635b3feb631c3faa914734791c2084adfefe3bccd491d593055588450b3ae"], &(0x7f00000001c0)=0x56) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000002c0)={r9, 0xfffffff8, 0x10}, &(0x7f0000000300)=0xc) 07:50:06 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:06 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:06 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:06 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x3, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0xa, 0xffffffffffffffff, 0x8) [ 1299.403887][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.410858][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 07:50:06 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x38, 0x1, @tid=r1}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r2}}, 0x0) r3 = gettid() r4 = fork() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x40, 0x4, 0x11, 0x0, 0x0, 0xa0030, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0x40a, 0x7fff, 0x8, 0x4, 0x2, 0x20, 0x3, 0x0, 0x7fff}, r4, 0x8, 0xffffffffffffffff, 0x9) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) [ 1299.584965][ T26] audit: type=1804 audit(1638517806.346:521): pid=12204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/530/bus" dev="sda1" ino=15421 res=1 errno=0 [ 1299.591367][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:06 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1299.625531][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1299.730821][ T26] audit: type=1804 audit(1638517806.346:522): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/129/bus" dev="sda1" ino=15420 res=1 errno=0 07:50:06 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x1e}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r4, r5+10000000}, {0x77359400}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0xf, 0x0, @thr={&(0x7f0000000440)="3d6918c4c9092e353d9bec59dc012033d02e37f4dd9a07945f972efe7e8e560a7efb15167c5115e56200059ae3f949c0cb1e65de2b95b5af2ba2b8f02204519626dc87825820ce2fe8f7a8534e5c698e273e2642588fd4c1d97205a73bfba5d709e37f5688adc502789a28908f7fb82c85c42cb06e8d563b3a8d82bdc42643f3083414c2abd7edb7800f", &(0x7f0000000240)="0b069ab3fc3c5a083b794305b692c330212b5acec19a5fa17729dd9e5d243561e97dff8866a2a4c6a765af68e37dd53089fdaede6c0ec834dad01e2e84a5e1113d3df796b06ad75f5cd4793f59d3cdf31e2a090482ac0c3f4017b372a407f0873dab10b73653bde674eb7743451e9a081d14f6ac5cac31ca3817d29330ca"}}, &(0x7f0000000380)=0x0) timer_settime(r6, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000500)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x10001, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:06 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:06 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x2, 0x70bd27, 0x400, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7d}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x20000040) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:06 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = gettid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c667363616368652c64656275673d3078303030303030303030303030303030392c6d6d61702c64656275673d3078303030303030303034333937316136382c6c6f6f734654466ae9781b642b5d2c736d61636b6673666c6f6f723d23407b2c736d61636b6673666c6f6f723d277b5c2c00"]) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) clock_nanosleep(0x4, 0x1, &(0x7f0000000580), 0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x3, &(0x7f0000000600)={0x0, 0x27, 0x4, @tid=r2}, &(0x7f0000000640)) timer_create(0x3, &(0x7f0000000380)={0x0, 0x39, 0x0, @tid=r2}, &(0x7f00000003c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000500)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000540)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) syz_open_procfs(r2, &(0x7f00000005c0)='net/ip_vs\x00') 07:50:09 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) io_getevents(0x0, 0x101, 0x4, &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f0000000240)={0x77359400}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) io_getevents(r4, 0x2, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) io_setup(0x20, &(0x7f0000000440)=0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x115201, 0x0) io_submit(r6, 0x2, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, r7, &(0x7f00000004c0)="c9faa4b558c5ad3f23d21f02265fcfaec44c5b035a3a38594d27fb287062c6c21f971ce75e9b7b09d9d56ce9a10f0180ce155a46d558ca9ccbcf570022a7855a1ffd24bf021d63f1c8e6620e77750f1a1ab55dd1095bb7cfacf899b1d19c4e4b09bb368d0fc6b615a1bc3d33bcb76b2da8a9ddac", 0x74, 0x2c7d, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x2, r1, &(0x7f0000000580)="123d55412e8b8e47878883690342c8", 0xf, 0x18d98298}]) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:50:09 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000020301000000000000000000"], 0x14}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000240)={{r0}, "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"}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000001240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) r8 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) r9 = syz_io_uring_setup(0xdc2, &(0x7f0000000100)={0x0, 0x0, 0x35, 0x0, 0x1c4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f61000/0x1000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r10) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000100)="c25e77e771123076861632bc434e80f302b852fcfb79cd84919c76a9c94a995bf89844804ca5d6affa84b8085aefc8dc466aaa652dc69c12034c51321eb3cc72fa6597048cef55e70ac5b6e4658b679fc8e4096acb01ae871da828c3d7429eb9fb6451b5c969492a7f6f8dd84b9ae46f2eb5d85a30559a9107f0ef360db4", 0x7e, 0x4006000, 0x1, {0x0, r10}}, 0x1c) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:09 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1302.600119][ T26] audit: type=1804 audit(1638517809.356:523): pid=12254 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/130/bus" dev="sda1" ino=15434 res=1 errno=0 [ 1302.607219][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:09 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1302.639603][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1302.685233][ T26] audit: type=1804 audit(1638517809.406:524): pid=12255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/531/bus" dev="sda1" ino=15436 res=1 errno=0 07:50:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x6fce, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) accept4$netrom(r0, &(0x7f0000000480)={{0x3, @rose}, [@bcast, @null, @rose, @bcast, @default, @remote, @bcast, @default]}, &(0x7f00000001c0)=0x48, 0x80000) r5 = dup(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000240)={0x8, 'veth1\x00', {'sit0\x00'}, 0xffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x44000040}, 0x4000008) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x46) 07:50:09 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:50:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1f8, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb80}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @private1, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffc00000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20}, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:09 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:50:09 executing program 4: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:50:09 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000440)="8568994a61700fc78c1205df15d704be9fadd8850817009caee0e75631df4a2ed0a63890e134a53b5f8b60cda87c8f7391698a9a2068e9bd90561541289b0c68c515cee3e0a675a888dc689eb45ec17ba8cb29a747bbf0512687f03cd330d2f7bfa0e8a759f26f47d077d5b932ed58d0c2d010b5f254c2bceb107e22aee8eac88a07148c454d2ff6e9632138ae2af5f12637df2f56300333d1a0acb5d6cdb2ede995c63ff22a3b371bec684a307c94aeaf000250c9b702fe2c04ec3ae23ca8a1f4a81808b44e862889112b19f2ed612fe99504c7812658529d0f421c3fa85521a60942540b0f8c97cc55b7", 0x3, 0x0, 0x1, {0x3, r2}}, 0x80000000) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r3 = gettid() pselect6(0x40, &(0x7f0000000100)={0x2, 0x11, 0x800, 0x2, 0x8, 0x100, 0x6, 0x1ff}, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x7, 0x1, 0x100000001, 0x5, 0x9}, &(0x7f0000000180)={0x6, 0x8, 0x3e2, 0x6, 0x6e, 0x9, 0x5, 0x92}, &(0x7f0000000240), &(0x7f0000000380)={&(0x7f0000000280)={[0x10000]}, 0x8}) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:50:09 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r4 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r4, 0x9, 0xffffffffffffffff, 0x8) 07:50:10 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:10 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) close(r0) syz_io_uring_setup(0x63c2, &(0x7f0000000100)={0x0, 0xa3c2, 0x2, 0x3, 0x276, 0x0, r0}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:10 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:10 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x5, 0x2400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x82369f871b1e2316}, {r2, 0x100}, {0xffffffffffffffff, 0x101}, {r3, 0x4}, {0xffffffffffffffff, 0x6d}, {0xffffffffffffffff, 0x6510}, {r4, 0x8188}], 0x7, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x1000]}, 0x8) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) [ 1303.795759][ T26] audit: type=1804 audit(1638517810.556:525): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/532/bus" dev="sda1" ino=15436 res=1 errno=0 [ 1303.798316][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:10 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x14, 0x4, @thr={&(0x7f0000000100)="96255f0cf4f37209ccb79ac89c1c36b127810000f9daaf6ed5354ed76e33135002132a0e38c6f18e7ac4af2bb933793afae3f78094180d2aa6b7a0e22a7093d3afbd9a0ddd4a24db740e7dac1b43c907b54f52b9282a7ae8ad02dc6db8bb1673c9597763508426bdaad26acce44056ccf317ad3d2183570eb25a7265f8374e400000000000", &(0x7f0000000440)="36678977f55e2a91268e2f236b295a8a5a2ce93237af41101d0d23bc9d48546a1490f6ba7ac58932525203a9a842885439e5b5cd9f00252710692b528a9efa81a1913c9dbe8f55537bff75ced738227159f0ab7426c978925b0459c2149634590d2d8ec1a1f18693e57aec4252cd4a8e1f9547358416bb7e700479ba0c1fae8d2b07ef74e5aad31e68dc442b2e0ba7e9a8aa87dd475b0f4be7803dd093ec7adf09e106f141a468b24a673db675a6aeb0f3bbbf85d72492998459aae42f805975ae5ea0c0e373e8172e298f4487d23e020dd9d9"}}, &(0x7f0000000040)=0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x5, 0x1, @thr={&(0x7f0000000680)="cff62fc0b79068ab56e805362dcab3d169c21d39b1cf6155c83671c162c408467fb6878250d65c59be5e91911976463044a6fdce1cc7e3e2f56f11ac7e1143bc2392a2c559b2917c4163bd9427571701a1f62c6635edfabd7e163a093e09273d84b199ab33bc00e459e3194f8851514ae7ce7bee4e9131aac762a5275dacc5eab9d23fe3a84416e0f8f3b99e25fc2c8899739bebf8058aff826a2461f6035f6e070393202baa63c6d687af1d6a30d93b9c4b3e77e8f623f4b72223a2697b4f86eaab9e8f143211", &(0x7f0000000780)="64c0ed337440ed7c10f56d52c87c551563c5a7c10614830a8a3f4f3c72fcef20f90f9276326bddcc5d2337c04474a4df5403ecc59ee72dd8ecb4a5642f3bd8fe3230643e5cad"}}, &(0x7f0000000840)=0x0) timer_settime(r4, 0x1, &(0x7f0000000880)={{0x77359400}}, &(0x7f00000008c0)) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x1, &(0x7f00000003c0)={0x0, 0x30, 0x0, @thr={&(0x7f0000000380)="abbfca792eaaab184bcfe4ea21fffc435a1325a284ee70042c10ebde250a", &(0x7f0000000540)="5bb2ecce3ae57b6ba78e98bf76cc15865251271084735091a84c8fd5def90f527f97615c87dc6df914e2ea50153c8de6d05954599e848b729bca90ae59bae998adf614b38b587828734f1b63d28f3f34ce6c0150c3f05aad87a4ea54cb61bf6090f76d6ae6a7ed07057d1948acb420964261bc2aeaf04815af2730a9b9b7d922f263416555f278200f0cb1f7c6ac7b39f9bff4723f8f9c53a894f440616ccc85b70b2d83ff48145daa05141206af66b3d1eb02803c5f77f1bbf5918ecd"}}, &(0x7f0000000600)=0x0) timer_settime(r5, 0x1, &(0x7f0000000640)={{0x77359400}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1303.920839][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:10 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace$setopts(0x4200, r1, 0x2, 0x23) ptrace(0x11, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x3a, 0x2, @tid=r1}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1303.977926][ T26] audit: type=1804 audit(1638517810.666:526): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/131/bus" dev="sda1" ino=15441 res=1 errno=0 07:50:10 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={r5, 0x60000000, 0xc08a, 0x1}) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r8, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=""/135, 0x87}], 0x1, 0x8, 0x5) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001c40)={r5, "6c7a34ee93386bac50a054b503493a27"}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000240)={{r0}, 0x0, 0x12, @inherit={0x78, &(0x7f0000000100)={0x0, 0x6, 0x6e16, 0x4, {0x24, 0x3f, 0xc148, 0x0, 0x1}, [0x40000000, 0x3, 0xffffffffffffffff, 0x4, 0x3, 0x7]}}, @devid=r5}) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:10 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x29, 0x0, @thr={&(0x7f0000000100)="a40091363c66484f14176c7929589176c55e4e40712260caf899b3d5f117d430bcb027012e36c3d2032f4d70da168735ea3d17923cdd8e2d7a2b6a959c77d13ea491a2b495061dc237cdb58e5c13adc55d463019b3cd38e120157b621fceb9873d2532788a1bfbadd89981ad56853c0d4118e552c378bb9587ebe1a2cd24ce85654c5e847ec4d1f58951630f9b5ada", &(0x7f0000000380)="29858f24f22d6ca933724f89e3e093d055e93ed22ad3da6248f3f92a3d1906e91297771fef91b14e293331bbe908f34b1ee2833a75e869aa8becd80e1afd6dbfae9e9f48752b543a3ad66de1f407d1fbc18f0a5fb46386710ba1156f2814e3e49554"}}, &(0x7f0000000440)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1304.231905][ T26] audit: type=1804 audit(1638517810.986:527): pid=12312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/132/bus" dev="sda1" ino=13938 res=1 errno=0 [ 1304.239427][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:11 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x4000, &(0x7f0000000100)={0x0, 0xb8a6, 0x4, 0x1, 0x25e}, &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1304.678286][ T26] audit: type=1804 audit(1638517811.436:528): pid=12322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/133/bus" dev="sda1" ino=15433 res=1 errno=0 [ 1304.734947][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:11 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:11 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1305.002660][ T26] audit: type=1804 audit(1638517811.766:529): pid=12332 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/533/bus" dev="sda1" ino=15433 res=1 errno=0 [ 1305.031151][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1305.034075][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:11 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) r4 = gettid() rt_sigqueueinfo(r4, 0xc, &(0x7f00000002c0)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) rt_tgsigqueueinfo(r4, r5, 0x2f, &(0x7f0000000100)={0x28, 0x3f, 0xfa0}) getpgrp(0x0) 07:50:12 executing program 2: pipe(&(0x7f0000000040)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = dup2(r0, r0) r7 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$binfmt_script(r4, &(0x7f0000001240)={'#! ', './file0', [{0x20, ',:'}, {0x20, '/dev/vga_arbiter\x00'}, {0x20, '+'}, {0x20, '/dev/vga_arbiter\x00'}, {0x20, '-'}, {0x20, '(!'}, {0x20, '\x00'}, {0x20, '/dev/vga_arbiter\x00'}], 0xa, "a71758305872e7ea30309e2af343dbe7ed7b7999e6300df0a2ec7dbff126ed78c4222218d805cd6f6967806d7a316fe3e1fa093dfd"}, 0x82) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) r8 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r10) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000240)="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", 0x1000, 0x40000, 0x1, {0x0, r10}}, 0x0) [ 1305.199234][ T26] audit: type=1804 audit(1638517811.776:530): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/134/bus" dev="sda1" ino=15434 res=1 errno=0 [ 1305.338003][ T26] audit: type=1804 audit(1638517812.096:531): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/135/bus" dev="sda1" ino=15461 res=1 errno=0 [ 1305.380954][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:12 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000040)={0x0}) r1 = syz_io_uring_setup(0x41b3, &(0x7f0000000100)={0x0, 0xd54, 0x0, 0x1, 0x64}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000240)) r3 = syz_io_uring_setup(0x3a85, &(0x7f0000000380)={0x0, 0xb420, 0x1, 0x3, 0x2fb}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000440)=0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000004c0)={0x7, 0x7, 0x4, 0x400, 0x5, {0x77359400}, {0x3, 0x8, 0x98, 0x6, 0xff, 0xff, "293dc530"}, 0x10001, 0x1, @offset=0x1, 0x1, 0x0, 0xffffffffffffffff}) syz_io_uring_submit(r2, r4, &(0x7f0000000540)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x7, 0x3, 0x1, {0x0, 0x0, r6}}, 0x6) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r7 = gettid() ptrace(0x11, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000000000002e2f66696c253000a5b1b03f2e11ec52508604662ece286c7714cfdf6af4f4cd6a14f0ec58aa9e26e7757fef73"]) dup3(r1, r8, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r11 = dup2(r10, r9) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r11, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$vim2m_VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000000580)={0x1, 0x1, 0x4, 0x10000, 0x2, {0x0, 0xea60}, {0x3, 0xc, 0x1, 0x7, 0x4a, 0x9, "aca94041"}, 0x80000001, 0x1, @offset=0x1000, 0x6}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r7, 0x9, 0xffffffffffffffff, 0x8) 07:50:12 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r5 = dup2(r4, r3) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) write$cgroup_int(r5, &(0x7f0000000100)=0x8, 0x12) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1305.738386][ T26] audit: type=1804 audit(1638517812.496:532): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/136/bus" dev="sda1" ino=15460 res=1 errno=0 [ 1305.754815][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:12 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) io_pgetevents(0x0, 0x0, 0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000580)={r2, r3+10000000}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x32fb]}, 0x8}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100)={0x100, 0x60f, 0x3, 0xfffffffffffffff9, 0x0, 0x81, 0x0, 0x2}, &(0x7f0000000140)={0xccf6, 0x4, 0x7fffffff, 0x7ff, 0x7, 0x7, 0x8, 0x3}, &(0x7f0000000180)={0x3, 0x5, 0x4, 0x4, 0x80000001, 0x9, 0x3, 0x80000000}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000280)={[0x1]}, 0x8}) timer_create(0x7, &(0x7f0000000640)={0x0, 0x1f, 0x0, @tid=r1}, &(0x7f0000000680)) clock_gettime(0x5, &(0x7f00000003c0)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) getpgid(0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:12 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020016) [ 1306.082695][ T26] audit: type=1804 audit(1638517812.846:533): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/137/bus" dev="sda1" ino=13903 res=1 errno=0 [ 1306.119050][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1306.363687][ T26] audit: type=1804 audit(1638517813.126:534): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/534/bus" dev="sda1" ino=15461 res=1 errno=0 [ 1306.402482][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:13 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:13 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ptrace$setregs(0xf, r2, 0x6d63, &(0x7f0000000100)="974ab4ac") perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x5, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:13 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 07:50:13 executing program 2: pipe(&(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, &(0x7f0000000100)=0x100, 0xffffffffffffffff, &(0x7f0000000140)=0x5, 0x2, 0x1) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:13 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020016) [ 1306.719149][ T26] audit: type=1804 audit(1638517813.476:535): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/535/bus" dev="sda1" ino=15471 res=1 errno=0 [ 1306.748875][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:13 executing program 2: pipe(&(0x7f0000000040)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r6 = dup2(r5, r4) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) syz_io_uring_setup(0x882, &(0x7f0000000240)={0x0, 0xea6c, 0x4, 0x3, 0x1e6, 0x0, r6}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0xf8000000, 0x7, 0x0, {0x0, 0x0, r8}}, 0x8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_vif\x00') syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {0x0, r7}, 0x4, 0x2, 0x0, {0x0, 0x0, r9}}, 0x0) 07:50:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) getpgid(0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:13 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x5, &(0x7f0000000100)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{r3, r4+60000000}, {0x0, 0x3938700}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x2, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:13 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000140)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:50:14 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7, 0xfe, 0xff, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x1, 0x7, 0x5, 0x4, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x8, 0xffffffffffffffff, 0x8) [ 1307.321194][ T26] audit: type=1804 audit(1638517814.076:536): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/138/bus" dev="sda1" ino=15472 res=1 errno=0 [ 1307.359230][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee6000/0x2000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/47, 0x2f}], 0x5, 0x2, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="03000000000000002e2f66296c6500008922db18db582f221e4e29c6623c2d20943e774e1d1593e8"]) close_range(r5, r6, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x196e, 0x0, 0x1, 0x0, 0x0) 07:50:14 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x800100020016) [ 1307.801016][ T26] audit: type=1804 audit(1638517814.556:537): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/536/bus" dev="sda1" ino=15462 res=1 errno=0 [ 1307.828512][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:14 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) getpgid(0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x4b4, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x468, 0x3, 0x0, 0x1, [{0x2e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "6b8381be4a6bb62112e48c5d31657c8cce15e8ae9e759d74589f4545541eade7218a0e0f4d31b4b7a928affe589badc321f98c816264901edacc6043c30f9cfe3ff93b0a5df89965ca6f79a9aa4b7f41a491ea2fe7668bdc8d7c5877f77da3203966d81fb07e4fb543d62b30e43963836c35"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x238, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "cd7318103c22922160a2d936472008623cc0df28855474b9567c44789f9ea6d5c1de4fd1772b6c1491d47b0a1fa25bb0280bc16bcdb13ecfc9334af772637ad2e1a5c1c2c879b953809fc6ba26afd6f86e4747b38663483fc3c4c0641a23f1ede4f01eda468119cb38592516354623e00fcc33640847d194e2762ae1591ea33f3c5469d41cd596c5745f35d7082b3b7b77a352c22c4564db57"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "76e9d7af4002270f591f1d279d0562862c7ee2ab5f44ffed208517d2e2265218ff6220ede07f522355412d7bf0c2ea6c3dbf20df78e8ddc37caa140f2806aaa005985c1a09376ccb5a18b87da19c46cd1a3867e57822586a060e277ea91aa5ccc8e64a421fb93e86fa691995e39e2470476021d5fc198be176de98e2df1ed6e837429be5bd3b20fb4cc3"}]}]}, {0x17c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x110, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "15430de39f1e100f9aeb3d2ea0f9cd3f2ce0da6b80b8a4825e31e0eb17b4a29ff6db59ba51052016683876f294ee394481e170c1ef8e2c813d863e4747fb943fa8fec322d9399727ab591f85310dcd0a392952770d06ea6723867de161d3296e22d5b5e62c666a3768f36b6a6b5a9c69051c63359deadbff9a85d26ebe694a12ffd11aec047aa9bb6ceb2a8a05c3042e00c94f4555207ecbfb9fea3cb2a825cf322400a9e1b86574b312b6cf60"}, @NFTA_DATA_VALUE={0x58, 0x1, "21ca025c61c5eea1eb0d09699ee1b7321710b55214e78dfcd104e09e8b874597c60aa361330a2db0875d9c214a45f5213f53e93ad63694540ea2c78ab7c8fa05735e3f96837e84f5171ce7577e1467cc64f9cf6c"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4c6}]}]}], {0x14}}, 0x5bc}, 0x1, 0x0, 0x0, 0x40080}, 0x2404c800) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:14 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) clock_nanosleep(0x5, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000440)={{r5, r6+60000000}, {r7, r8+60000000}}, &(0x7f0000000480)) 07:50:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) getpgid(0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:15 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307f, 0x0, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b14, &(0x7f0000000080)) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req={0x7, 0x6, 0x3f, 0x9}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:15 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r6 = dup2(r5, r4) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) write$vga_arbiter(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='rge7\x00'/18], 0x14) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:16 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x2}, &(0x7f0000002600)=0x0) timer_create(0x3, &(0x7f0000002500)={0x0, 0x39, 0x2, @thr={&(0x7f0000000040)="5846a890ba15656ecfd7bb50565e6c100899cfc52dc01e815fb81f2a4b3cb454ce492e080afa268c694823ba10afccbe34dc9a174a8893dd624dd6fc", &(0x7f0000001500)="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"}}, &(0x7f0000002540)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r2 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r4 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x40, 0x4, @tid=r4}, &(0x7f00000014c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000002580)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000025c0)) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000001440)={{}, {r6, r7+60000000}}, &(0x7f0000001480)) timer_create(0x4, &(0x7f0000000240)={0x0, 0x3, 0x1, @thr={&(0x7f0000000440)="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", &(0x7f0000000100)="aa41a8073f9de1d8babcc843c68a68517d882f73a37db16588a473556531a2ee19e0a6ea8cab5806dc3e22a236ba543c6d63522f3bac13e1389f19ed223b51fee6f2dea97f3db963eab0c1f1bb896a3424d7506027a3b5cc3cfa1d423ba60d853da12ef776a89bbd1ad45600019c38fb3b7d0cda73b8ac7b6fece032b421eae5717da56819b1cb5307ec8ef81946f3b1e26f7478699a76306a99b466a951660186a04a56c5af04600738900a3452d0"}}, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000002640)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000002680)={{}, {r8, r9+60000000}}, &(0x7f00000026c0)) fcntl$getflags(r2, 0x401) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r4, 0x9, 0xffffffffffffffff, 0x8) 07:50:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000500ca17afa400000000000b00000000"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) clock_gettime(0x7, &(0x7f0000000280)) fanotify_init(0x0, 0x0) timer_create(0x4, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r3) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000480)) timer_settime(r2, 0x1, &(0x7f0000000240)={{0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x3, 0xff, 0x4, 0x0, 0x10000000000000ff, 0x40, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xf0e}, 0x2eca, 0x1ff, 0x7, 0x7, 0x5, 0x6aa, 0x401, 0x0, 0xc, 0x0, 0xfff}, 0x0, 0x9, 0xffffffffffffffff, 0xa) 07:50:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x5) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:16 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) getpgid(0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:16 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:17 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000100)={[0xca]}, 0x8) fanotify_mark(r2, 0x82, 0x48002032, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) [ 1310.288488][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1310.288505][ T26] audit: type=1804 audit(1638517817.046:542): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/538/bus" dev="sda1" ino=13946 res=1 errno=0 [ 1310.359593][ C1] net_ratelimit: 3 callbacks suppressed [ 1310.359614][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:17 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000140)={r4, r5+60000000}, &(0x7f0000000180)) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1310.490343][ T26] audit: type=1804 audit(1638517817.156:543): pid=12489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/773/bus" dev="sda1" ino=13945 res=1 errno=0 07:50:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x422800, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000400)) write$vga_arbiter(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7461802bb4b814720003000000000008d858fc4837200000000000000000000051ce32efb1bc9fdb6610dd40de60f4e8819049c143fef9c67afbcb64c86841e2a1dee890c9cef61e5806c81f41402ac556c1b1700be8d4f84b92254076125cb5723cddd5d4136df9ce9366b55214f5ee4abf9d62f356bf53b4e03eeeae29f30499077040de7edd87e0e2cf29"], 0x17) ptrace$setregs(0xd, 0x0, 0x9, &(0x7f0000000300)="e48fd056fe8f4cdb87126959d2feac2fea5c055cefb43b092011544953fe6d91c21baee5faadee20cd22cebdeea19271b1b4defe2bb82f5d3522b86ba41157f66cd0c89ea00bef69a87bb3d12a284626e56333b76431a972c7d84598c71fae2bd3d049431ed6ae374d102b6802a0b92cad1676892b01a5f96c3811e256bb0eba9cde08aae48a83df759690cfd489e3bbfca7f2aa38deb716b642646674b46c85b8f05ccafb99f67bc36501c2b5cd5d220d8008380fe6833ca4dd0f39c5c119c284df58914b0c445f13420d5008f2c7464b431bdcd44b61eae6ddaa2d827fc11077") ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_io_uring_setup(0x765e, &(0x7f0000000080)={0x0, 0x49e, 0x0, 0x0, 0x202, 0x0, r5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) fsmount(r5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1}, 0x4000003) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r9 = dup2(r8, r7) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r9, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) syz_open_dev$audion(&(0x7f0000000100), 0x8, 0x8100) 07:50:17 executing program 2: pipe(&(0x7f0000000040)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x80, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x6, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x80}}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="ec1231b40c842976c2e0af6ea5c8163c68f9088ca562984615e913e52794f7c5904674b0a02259304b0b518cdbe10d93a52f1599875c9f125b8ffc7cd1a25c798f383fba33b1355872ceec1cf813c8eff76edd", 0x53}], 0x1, 0x3) [ 1310.830815][ T26] audit: type=1804 audit(1638517817.586:544): pid=12517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/141/bus" dev="sda1" ino=13951 res=1 errno=0 [ 1310.865476][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1310.881092][T12516] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1311.032019][T12519] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 07:50:17 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x12e4, 0x0, 0x1000000, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:17 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r6 = dup2(r5, r4) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) syz_io_uring_setup(0x882, &(0x7f0000000240)={0x0, 0xea6c, 0x4, 0x3, 0x1e6, 0x0, r6}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0xf8000000, 0x7, 0x0, {0x0, 0x0, r8}}, 0x8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_vif\x00') syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {0x0, r7}, 0x4, 0x2, 0x0, {0x0, 0x0, r9}}, 0x0) [ 1311.274190][ T26] audit: type=1804 audit(1638517818.036:545): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/539/bus" dev="sda1" ino=14195 res=1 errno=0 [ 1311.303679][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:18 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r1) timer_settime(r1, 0x1, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x8, 0x8, 0xfff, 0x2, 0x1}, &(0x7f0000000240)={0x9e, 0x9, 0x80000000, 0x7, 0x6, 0x180, 0x7, 0x7}, &(0x7f0000000440)={0x0, 0x1, 0x400, 0x5, 0xc9, 0x7, 0x9, 0x3}, &(0x7f00000004c0)={r3, r4+10000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x5e3]}, 0x8}) timer_create(0x7, &(0x7f0000000000)={0x0, 0x14, 0x4, @thr={&(0x7f0000000100)="562ebb199355642c8cb805215ee0c8406edf8a53c81ddce36f333f213602bfc607da5c04b0f6902b995524f65634f4398dc87de4c5e8e070bb079f3cbe74b4101196d7121bbccabd7b2c03f5bf2192ddec320a", &(0x7f0000000380)="5127800cea75d0a473ce2207c85439d7b1c3f606f621dd3f23045d7ea0c6f521650db63d0316ad9a8e5239fd465580647de18892427163d2907547bc244c414cf6f766bcc1b7dd872f8fbe988cf91839bb7eb6f1ca95a5668c0fcf58da49ef9d17f0850630cdab2e0080d44196d241e1583e4b"}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x1, 0xff, 0x0, 0x0, 0x104, 0x1888, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000000c0), 0x9}, 0x16071, 0x5, 0x7, 0x2, 0x5, 0x2006ac, 0x7fff, 0x0, 0x9, 0x0, 0xa0}, r2, 0x9, 0xffffffffffffffff, 0x3) 07:50:18 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x13, 0x1}, 0x1) 07:50:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={r5, 0x60000000, 0xc08a, 0x1}) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r8, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=""/135, 0x87}], 0x1, 0x8, 0x5) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001c40)={r5, "6c7a34ee93386bac50a054b503493a27"}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000240)={{r0}, 0x0, 0x12, @inherit={0x78, &(0x7f0000000100)={0x0, 0x6, 0x6e16, 0x4, {0x24, 0x3f, 0xc148, 0x0, 0x1}, [0x40000000, 0x3, 0xffffffffffffffff, 0x4, 0x3, 0x7]}}, @devid=r5}) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:18 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) wait4(r2, &(0x7f0000000140), 0x4, &(0x7f0000000440)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:18 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0xc, 0x1, @thr={&(0x7f0000000100)="2d1b2d80cc31a3e7e887", &(0x7f0000000440)="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"}}, &(0x7f0000000180)) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:18 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1311.718493][ T7389] Bluetooth: hci5: command 0x0406 tx timeout [ 1311.919881][ T26] audit: type=1804 audit(1638517818.676:546): pid=12559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/142/bus" dev="sda1" ino=14339 res=1 errno=0 [ 1311.956030][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:18 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r3) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x77359400}, {r4, r5+10000000}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:18 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140)) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6, 0x3f, 0xfd, 0x5, 0x0, 0xaa, 0x412, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x6, 0x80b1}, 0xc104, 0x10001, 0xaa, 0x7, 0x4, 0x8000, 0x1, 0x0, 0xb68, 0x0, 0x730}, r3, 0xd, r4, 0xa) 07:50:18 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020016) 07:50:18 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) nanosleep(&(0x7f0000000140)={r3, r4+10000000}, &(0x7f00000001c0)) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:19 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000100)=0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r2}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r4 = gettid() ptrace(0x11, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0xc, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3f, 0x5, 0xc8, 0x3, 0x0, 0x7, 0x4c208, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x2501b, 0xe36, 0x8, 0x3, 0xfe, 0x2, 0x8, 0x0, 0x7, 0x0, 0x47d4}, r5, 0xf, r6, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r4, 0x9, 0xffffffffffffffff, 0x8) 07:50:19 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) [ 1312.335819][ T26] audit: type=1804 audit(1638517819.096:547): pid=12572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/540/bus" dev="sda1" ino=13948 res=1 errno=0 [ 1312.363487][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:19 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r1, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/80, 0x50}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/180, 0xb4}], 0x4}}, {{&(0x7f0000001680), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001700)=""/57, 0x39}, {&(0x7f0000001740)=""/188, 0xbc}, {&(0x7f0000001800)=""/172, 0xac}, {&(0x7f00000018c0)=""/185, 0xb9}], 0x4, &(0x7f00000019c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001a80)=@abs, 0x6e, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001cc0)=""/91, 0x5b}], 0x1}}], 0x5, 0x40002003, &(0x7f0000001ec0)={0x77359400}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_create(0x0, &(0x7f0000001fc0)={0x0, 0x1d, 0x4, @thr={&(0x7f0000001b00)="097137debbed72166ea7af57f0fc613f32d963bda0482678896569f8dcf910130b8a51c8931db335eb622799eefc3a", &(0x7f0000001f00)="12f9ffa76d08fab14b4f6f657cc30288f6f3522f69cd75f9b454a504241299b590cc1880283893af59e2aa3c78e7fc1c1fef5a032c97b41739702ce14e86a750007ee5d180cf59a87a570358b8acf311041d920d414fa4778bce3f847ba428f6150fb0f70875082b4a8ceb16517819fc91b9d24ded1c650f1fb60ab56aeb84f8d4f9e739140cb14cc880cb88fa707be39064795b248d7174d4264eb2d3a1cecf7807b337526c"}}, &(0x7f0000002000)) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r4 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0x4}, 0x1, 0x7, 0x7, 0x9, 0x5, 0x400, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r4, 0x9, 0xffffffffffffffff, 0x8) r6 = gettid() rt_sigqueueinfo(r6, 0xc, &(0x7f00000002c0)) perf_event_open(&(0x7f0000002080)={0x4, 0x80, 0x7f, 0x58, 0x3f, 0x1, 0x0, 0x6, 0x1c020, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000002040), 0x1}, 0x40000, 0x0, 0x3, 0x5, 0x3, 0xfffffff9, 0x1, 0x0, 0x80000001, 0x0, 0x9}, r6, 0xc, r2, 0x2) 07:50:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:19 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020016) [ 1312.829001][ T26] audit: type=1804 audit(1638517819.586:548): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/541/bus" dev="sda1" ino=14263 res=1 errno=0 [ 1312.830605][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:19 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(0xffffffffffffffff, r1, 0x0, 0x800100020016) [ 1312.951523][ T26] audit: type=1804 audit(1638517819.706:549): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/143/bus" dev="sda1" ino=13928 res=1 errno=0 [ 1312.956345][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1313.039904][ T26] audit: type=1804 audit(1638517819.796:550): pid=12595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/542/bus" dev="sda1" ino=14358 res=1 errno=0 [ 1313.068549][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:19 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x20, 0x8c, 0x6, 0x0, 0x0, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd2, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x6104, 0xb6, 0x0, 0x7, 0xffffffff, 0x20, 0x5, 0x0, 0x5}, r4, 0x2, 0xffffffffffffffff, 0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:19 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:19 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r2) timer_delete(r2) r3 = gettid() clock_gettime(0x7, &(0x7f0000000800)) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r4) timer_delete(r4) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) futex_waitv(&(0x7f0000000640)=[{0x8, &(0x7f0000000100)=0x8000, 0x2}, {0x7f, 0xfffffffffffffffe, 0x82}, {0x0, &(0x7f0000000140), 0x2}, {0x900000, &(0x7f0000000180), 0x2}, {0x2, &(0x7f0000000240)=0x2, 0x2}, {0x100000000, &(0x7f0000000380)=0x1ff, 0x2}, {0x3, &(0x7f00000003c0)=0x8, 0x2}, {0x2, &(0x7f0000000440)=0xfffffffffffffbff, 0x2}, {0xa6e3, &(0x7f0000000480)=0x6, 0x82}, {0x1000, &(0x7f00000004c0)=0x40, 0x2}, {0xffff, &(0x7f0000000500)=0x7, 0x2}, {0x80000001, &(0x7f0000000540)=0x7, 0x2}, {0xf97f, &(0x7f0000000580)=0x7fff, 0x2}, {0x7, &(0x7f00000005c0)=0x7f, 0x82}, {0x9, &(0x7f0000000600)=0x9, 0x2}], 0xf, 0x0, &(0x7f00000007c0)={0x77359400}, 0x0) [ 1313.324246][ T26] audit: type=1804 audit(1638517820.086:551): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/543/bus" dev="sda1" ino=13979 res=1 errno=0 [ 1313.372463][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:21 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f00000001c0)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x1848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, r3, 0x8) 07:50:21 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x300}}, 0x0) syz_io_uring_setup(0x4c4b, &(0x7f0000000100)={0x0, 0xeb41, 0x20, 0x0, 0x85}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee7000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r0}}, 0x401) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:21 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:21 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x5, 0x7}, 0x1, 0x7, 0x80000001, 0x7, 0x5, 0x6ac, 0x8001, 0x0, 0x9, 0x0, 0xfff}, r2, 0xb, 0xffffffffffffffff, 0x8) [ 1315.260320][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:22 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x64c1, &(0x7f0000000100)={0x0, 0x3266, 0x2, 0x0, 0x8, 0x0, r0}, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r6 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) r7 = syz_io_uring_setup(0x7bd6, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r9) syz_io_uring_submit(r5, r4, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x4, 0x0, {0x0, r9, r1}}, 0x7ff) [ 1315.576398][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1315.576416][ T26] audit: type=1804 audit(1638517822.336:554): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/545/bus" dev="sda1" ino=14516 res=1 errno=0 [ 1315.619897][ C1] net_ratelimit: 1 callbacks suppressed 07:50:22 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) [ 1315.619954][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:22 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1315.832590][ T26] audit: type=1804 audit(1638517822.596:555): pid=12646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/546/bus" dev="sda1" ino=14483 res=1 errno=0 [ 1315.866428][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:22 executing program 2: pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r4, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0xeb84) 07:50:22 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) 07:50:22 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1316.209525][ T26] audit: type=1804 audit(1638517822.966:556): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/547/bus" dev="sda1" ino=14549 res=1 errno=0 [ 1316.239469][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:23 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x0) 07:50:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r4 = accept$nfc_llcp(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x60) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r4, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0xf, "0172093189cb67fb3afa674815d974eb35f78b976b250213b66a4d54905171e6b8d79db04b469e64cbdf4b3e3f0c09a83e34e68ca8449d18e7644603cad3d52fb5b9a2a0358462db4922143fa45110b84a2a7d738a8f84520935428370c0b54ee8192657264b86fbe8703a18f204bc90b8e512778b67df7349f32a07f3c5"}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)="4027c0fa15d6626ea44298cc0ed0ba1d693525cfc12e5635e00681be6984aaf4405a9955959141b08d175e82911e6ab3cb351b8f3877c355a98771fb7ba886ddc902bbda61d505c34b1565097e086eb777b59dc24aa608c7763b7871163496971486ad0df33947358592bfc9657a0c2f664e52335b217c39c95600e40fdf8f1230e8188b37c00623a4f728ae7187cb48dfd5527285d4b5c6b08d518ec77d360debdb37b43a173a2a5731f5bed5dd49dba6243b7b3a28582f06fdbfa5131e7fc8cdda48991cb81da1", 0xc8}, {&(0x7f00000003c0)="db6b582e717e92d32af397699d91543b27fa67657c691eb5c973a44444a1f29bd1756e71bb602fb435dc970f7866ff87181f649d7ec838fa4b3fe584ebe766ec13fd3a6593ab643fa05ef8304f291e606c15ae3c2abedecf8363cca24ac44fee6c1bb065600a466a50799c0b86a76f04d85b174ec4383503591c1a067f9db88ee14a4223065f5fff10a34cd62b4c0b22a6ae4ba0d0091058c68687c6366b80aa5e2c54963c71a375a8f78bc598c1bb7ad1abd72be30b2f90da3c3b6bb24c307dffa84de0148f89098eee5f", 0xcb}], 0x2}, 0x0, 0x3, 0x1, {0x0, r5}}, 0x0) io_uring_enter(r1, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1316.502740][ T26] audit: type=1804 audit(1638517823.266:557): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/145/bus" dev="sda1" ino=13951 res=1 errno=0 [ 1316.518521][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1316.579553][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:23 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:23 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(r0, 0x0, &(0x7f0000000240), 0x0) fanotify_init(0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r4 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) fanotify_mark(0xffffffffffffffff, 0x20, 0x8001000, r4, &(0x7f0000000100)='./file0\x00') timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x40) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, r7, 0x1, &(0x7f0000000140)="7200df12f3c1c249b300de2174e60f236692f5ed") perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3f, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, 0x0, 0x400000000000009, 0xffffffffffffffff, 0x8) 07:50:23 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000000d00)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)=""/227, 0xe3}], 0x1, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000640)=""/37, 0x25}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/173, 0xad}, {&(0x7f0000000880)=""/156, 0x9c}], 0x3, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/70, 0x46}, {&(0x7f0000000ac0)=""/125, 0x7d}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/59, 0x3b}, {&(0x7f0000000bc0)=""/105, 0x69}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40, &(0x7f0000000e00)) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x6, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x7}, 0x1, 0x7, 0x7, 0x1, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x100000009, 0xffffffffffffffff, 0x8) [ 1316.676656][ T26] audit: type=1804 audit(1638517823.336:558): pid=12673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/548/bus" dev="sda1" ino=13939 res=1 errno=0 07:50:23 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r4 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r4, 0x80184151, &(0x7f00000001c0)={0x0, &(0x7f0000000300)="5168f76f26c6858299c86a00320cf5122a08045e532a33576d3d1cfdc73acd1e488aa73f0ae78716934310f6e8c05eb2b73dc3df14d81442985ec86d156464a6034929188c5375508a792fabd9bceffe4e8c6464a9a58ccff7006c087256ce9a69d0bb4af54893ca2ea4d1f1521b146cd8d9ce0eb00f054d4a8af50633dab503bf00b1ecc18636ff2aa42727477efc99a9a6289523ee2efc5f68eca2990e691949ba8ba4486e2bcd6648d459a00197cc2c626a1dcb8d6a501e45585807503b80a78f74b3be008c73f92f962f5ddf87e91ed1662bc74365c362a924897511bd985414", 0xe2}) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000400), 0x60000) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) setgroups(0x2, &(0x7f0000000380)=[0x0, r9]) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000280)={0x18, 0x34, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x3c, 0x0, 0x0, @uid=0xee01}]}, 0x18}, {&(0x7f00000004c0)={0x98, 0x22, 0x100, 0x70bd26, 0x25dfdbfc, "", [@generic="1ad3d02179a49019a2bdcae1b52678fd34669c58cfdfe5919a4fd8e4afe222103d0ed562243817485514c473afc1a30a801efec9de00af8984df6081c43c34abb9e22c673f234f0947646461685550adef9efe02f040f241dc095df83549d9d422938f1cd446855a77acf34149525ec7ad9a3373761f24dd58665de9659729e4ca5aea35d7bf"]}, 0x98}, {&(0x7f0000001540)={0x149c, 0x37, 0x100, 0x70bd28, 0x25dfdbfe, "", [@generic="358b5ee5e3652bb5667db049648072e7dda9a7d64961ec68914be0743af02bfe5fdde9ae3197e7fb834d8db0b0ff165d3bb632ba39f8df58bec0af2561fa591ff424d07b9bb6f21af7b301946b3d57fe5a75bdcc018a7304db3e5fa26a78c009590b5aec2c11bfab746d4f85d4032e6fb7bb21a71b1e0ce87de63a516463939cfd2e1b428ee3cc37f8b5534e04bd2382eb", @nested={0x2f, 0x93, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@empty}, @generic="2f229d96acc90d07f42548ad5ba67058beda5c1297545341c8130878f385e137e9b35d"]}, @generic="a0a851a3a1664e2c23e3dd0a531e6f9c965389f28131b4d359b2b279bea32b7682546521481bd3cd97972599cfb0c9d5631d301559b3ebbd5d61eec803aff2960585c308a26bd1ae6884391c8a07", @generic="8b7a76a498cfb2e77eaf4fd9f8db4cbfe6f6b23a2611d3f590ca518427dc20af0822e348361fdf716e55fde12a603d4161e6931bd783d77e553cfcf4b4ce3738633d6f32eb7e6d307f6b6897d00c1e0da076e5c245c1b5a9d0fb5bed09be8134864e72387455c30b34db6f392c8dd5924715dbc60d55d0de1d9f4031fb4e0322442d15fd138ae8339c6fbea61edea8c0a892f50a07aab448c55a618e7f347ff15aae49b475503e5075abea7b043563d951164d56a91a4e310972f8ba6a64f55821c6506c7f67feb5a7c33e8b175aa4475035b559c05503dda11716da", @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@loopback}, @generic="f9a3a985b1", @nested={0x1294, 0x83, 0x0, 0x1, [@generic="b320f67b188bf58cc0eb9605ef9f8b5ea7e565ac7b57d9be38a72f8d217fcf49f48b78779ea35f3e03bb32ac2ebd9308f00835cd6fc7556bcf5339620ce0c7baf1aa4a148ebf6081262c865ee11c5f8318d778605de9de4b192e9d007e", @generic="9a5127e5d9a2fc6bdb8b3453cc627c42e3acb06d929349e7dbb076262c47848893db81181e0baf469be9a1cba400294282e7988dbe1ce3f38d889cd066c95216102d66f83876626f6a6c767f9b67b2652cab12ad48124e6c6bb739ce473b2e192c9f1b0b792c051eb72267", @typed={0x8, 0x10, 0x0, 0x0, @fd=r7}, @generic="4de124e11b1ec4d2ce99d47bf63622210af5d6d3ce0cab227936a16916adce4c1cc8845c9ba2f9ae56c15dca44aed969ca3eb4758b36dfe7996697614eb08c70b166d2b8980224ae15d3934b6c3af6649d8be2760421b1380662e8b82d24b6599856e955a2e54d7ef94cb6e53c27e5bb42b68d", @generic="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", @typed={0xc, 0x47, 0x0, 0x0, @u64=0x7}, @generic="3dcc63e04cfc44d5bd836072c35d44170ca685d39635d1abba7d17272bf3c4318cb0ae5c5b32425edc75be9a40ea981f046e757fcf628eba5afefe568a7204949a069968c431db91d9bffeeb2f1730ab4bdabcfd7739501c7b25a0cc0bee232b8c859c585e31b2bdc6a074cfd5264b87fe3ae2a713df8393b4a9443db7eb9160bee19aec09219cd8961a0560e1494306745826a91cc59cdbae8a13535728b92a99fa0a0cf56f658574a97ed3a52dcb49fcdea4dc1816bc5bc751698a72345f8d3af6ca44b05daa1b17f02c0f942b7727e9797e4be0", @typed={0x6a, 0x96, 0x0, 0x0, @binary="92f588811e2de66f9e412cb5d51c9b683b98541cd44cd38b859331d402eb34fd02451d2e4aeb6ce213f2ff79e7809d75a0df2610b7beaa09f486301d62e86c33575cea31708117eac5d804e77cc2b65d3580d38e382d94893d06e549b962bab4cfc897ed8b96"}]}]}, 0x149c}], 0x3, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x40, 0x800}, 0x20040000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) 07:50:23 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1317.129684][ T26] audit: type=1804 audit(1638517823.886:559): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/549/bus" dev="sda1" ino=14803 res=1 errno=0 07:50:24 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) fanotify_mark(r1, 0x2, 0x28, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:24 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x8]}, 0x8) connect$ax25(r0, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @default, @default, @bcast]}, 0x48) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:50:24 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1317.334617][ T26] audit: type=1804 audit(1638517824.026:560): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/350/bus" dev="sda1" ino=14818 res=1 errno=0 07:50:24 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:24 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1317.769388][ T26] audit: type=1804 audit(1638517824.526:561): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/146/bus" dev="sda1" ino=14803 res=1 errno=0 [ 1317.800813][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:24 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1317.970788][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1318.017440][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1318.045542][ T26] audit: type=1804 audit(1638517824.526:562): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/146/bus" dev="sda1" ino=14803 res=1 errno=0 [ 1318.404232][ T26] audit: type=1804 audit(1638517824.646:563): pid=12718 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/351/bus" dev="sda1" ino=14564 res=1 errno=0 07:50:25 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x77359400}, {r2, r3+60000000}}, &(0x7f0000000180)) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) gettid() ptrace(0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="00424541303101", 0x7, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000fefffffffe", 0x1d, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="0a010300ed000100c6e7d0016000000000000000040000000100000400000000000003000000000000000000a53c000002000000000000000801000000000000080100000000000000000000000000000010e4070913122c1643092d0010e4070913122c170936350010e4070913122c1643092d0010e4070913122c1709363501000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e75782055444646530000000000000000000000040500000000000000000000000000000000000008010000010103008500010033d418006000000001000a0000020000600000000000000000000000000000000101030087000100e81d1c0060000000010002060002000061000000000000001000000000000866696c6530010103009e0001001ffd1c0060000000010000060002000067000000000000001300000000000866696c6531010103000900010097f01c0060000000010000060002000068000000000000001400000000000866696c65320101030028000100c3e31c0060000000010000060002000068000000000000001500000000000866696c653301010300e4000100b7a72000600000000100000a000200007b000000000000001600000000000866696c652e636f6c64", 0x1e0, 0xb0000}], 0x10, &(0x7f0000000380)=ANY=[]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r4, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, 0x0) chown(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80)={0x0, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x5}}, &(0x7f00000004c0)={0x18, 0x0, 0x8000000000000000, {0x2}}, &(0x7f0000000500)={0x18, 0x0, 0x3f, {0x1}}, &(0x7f0000000540)={0x18, 0x0, 0xff, {0xa4e8ae5}}, &(0x7f0000000580)={0x28, 0x0, 0x3, {{0x0, 0xff, 0x784b07596052f627}}}, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x100000001, {0x8}}, &(0x7f0000000740)=ANY=[@ANYBLOB="1245000000e9ff91758d7f8cd16698bbca35516cc8f0bf000000"], 0x0, &(0x7f0000000a00)={0x78, 0x0, 0xffffffffffffffff, {0x9, 0x0, 0x0, {0x2, 0x1ff, 0x0, 0x0, 0x9, 0x10000, 0x0, 0x1, 0x40, 0x0, 0x25097032, 0x0, 0x0, 0xe1c7}}}, 0x0, 0x0, &(0x7f0000000bc0)={0x150, 0xfffffffffffffffe, 0x2, [{{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x2, 0x0, 0x3, 0x45ffc87d, 0x0, 0x3ff, 0x92adc44, 0x0, 0x2, 0x0, 0x3, r5, 0x0, 0x0, 0x10001}}, {0x0, 0x2, 0x1, 0x7, '.'}}, {{0x0, 0x0, 0x5, 0x2, 0x0, 0xffff, {0x5, 0x3, 0x8, 0x0, 0x9, 0x8, 0x0, 0x8000, 0xed, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x8}}, {0x4, 0x6, 0x5, 0x7, 'nfsd\x00'}}]}, &(0x7f0000000dc0)={0xa0, 0x0, 0xffffffffffffffe9, {{0x1, 0x2, 0x5, 0x6, 0x80000000, 0xfffffffd, {0x0, 0x9, 0x0, 0x4abd1b65, 0x1, 0x7, 0x400, 0x2, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0xffff8000}}, {0x0, 0x2}}}, &(0x7f0000000880)={0x20, 0xfffffffffffffffe, 0xfff, {0xa59, 0x0, 0x80, 0x9}}}) 07:50:25 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x280, 0x100, 0x5002004a, 0x0, 0x100, 0x0, 0x1e8, 0x3c8, 0x3c8, 0x1e8, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'vcan0\x00', 'veth1_vlan\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x90c}}, @common=@icmp={{0x28}, {0x0, "a167"}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x39}, &(0x7f0000000480)) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) r4 = gettid() rt_sigqueueinfo(r4, 0xc, &(0x7f00000002c0)) get_robust_list(r4, &(0x7f0000000380)=&(0x7f0000000280)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x0, &(0x7f0000000240)={&(0x7f0000000180)}}, &(0x7f00000003c0)=0x18) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:25 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x26, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) [ 1318.528722][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:25 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1319.159816][T12736] loop4: detected capacity change from 0 to 2816 07:50:26 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xfd, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1319.243543][T12736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) 07:50:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:26 executing program 4: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x77359400}, {r2, r3+60000000}}, &(0x7f0000000180)) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) gettid() ptrace(0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="00424541303101", 0x7, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000fefffffffe", 0x1d, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x10, &(0x7f0000000380)=ANY=[]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r4, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, 0x0) chown(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80)={0x0, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x5}}, &(0x7f00000004c0)={0x18, 0x0, 0x8000000000000000, {0x2}}, &(0x7f0000000500)={0x18, 0x0, 0x3f, {0x1}}, &(0x7f0000000540)={0x18, 0x0, 0xff, {0xa4e8ae5}}, &(0x7f0000000580)={0x28, 0x0, 0x3, {{0x0, 0xff, 0x784b07596052f627}}}, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x100000001, {0x8}}, &(0x7f0000000740)=ANY=[@ANYBLOB="1245000000e9ff91758d7f8cd16698bbca35516cc8f0bf000000"], 0x0, &(0x7f0000000a00)={0x78, 0x0, 0xffffffffffffffff, {0x9, 0x0, 0x0, {0x2, 0x1ff, 0x0, 0x0, 0x9, 0x10000, 0x0, 0x1, 0x40, 0x0, 0x25097032, 0x0, 0x0, 0xe1c7}}}, 0x0, 0x0, &(0x7f0000000bc0)={0x150, 0xfffffffffffffffe, 0x2, [{{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x2, 0x0, 0x3, 0x45ffc87d, 0x0, 0x3ff, 0x92adc44, 0x0, 0x2, 0x0, 0x3, r5, 0x0, 0x0, 0x10001}}, {0x0, 0x2, 0x1, 0x7, '.'}}, {{0x0, 0x0, 0x5, 0x2, 0x0, 0xffff, {0x5, 0x3, 0x8, 0x0, 0x9, 0x8, 0x0, 0x8000, 0xed, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x8}}, {0x4, 0x6, 0x5, 0x7, 'nfsd\x00'}}]}, &(0x7f0000000dc0)={0xa0, 0x0, 0xffffffffffffffe9, {{0x1, 0x2, 0x5, 0x6, 0x80000000, 0xfffffffd, {0x0, 0x9, 0x0, 0x4abd1b65, 0x1, 0x7, 0x400, 0x2, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0xffff8000}}, {0x0, 0x2}}}, &(0x7f0000000880)={0x20, 0xfffffffffffffffe, 0xfff, {0xa59, 0x0, 0x80, 0x9}}}) 07:50:26 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1319.663975][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1319.676715][T12749] loop4: detected capacity change from 0 to 2816 07:50:26 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1319.722643][T12749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) 07:50:26 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) timer_create(0x5, &(0x7f0000000100)={0x0, 0x36}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180), &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:26 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:26 executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:27 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000001440)={0x40000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0xc}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000000240)=""/96, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r1], 0x6}, 0x58) ptrace$setregs(0xd, r3, 0x10001, &(0x7f00000003c0)="25775a5224d593808266925a") 07:50:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1320.618725][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1320.618742][ T26] audit: type=1804 audit(1638517827.356:569): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir276889344/syzkaller.5Vgm0b/552/bus" dev="sda1" ino=14517 res=1 errno=0 [ 1320.725701][ C1] net_ratelimit: 1 callbacks suppressed [ 1320.725738][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1321.039594][ T26] audit: type=1804 audit(1638517827.796:570): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/149/bus" dev="sda1" ino=14647 res=1 errno=0 [ 1321.086194][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:28 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r2) timer_settime(r2, 0x1, &(0x7f0000000240), 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) clock_gettime(0x3, &(0x7f0000000440)) r3 = gettid() timer_settime(r1, 0x0, &(0x7f0000000380)={{0x77359400}}, &(0x7f00000003c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x27, 0x1, @tid=r4}, &(0x7f0000000180)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:50:28 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)) fanotify_init(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0, r1+10000000}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0xa0c68, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:28 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:28 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0x100, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:28 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) [ 1322.239738][ T26] audit: type=1804 audit(1638517828.996:571): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/150/bus" dev="sda1" ino=14580 res=1 errno=0 [ 1322.279657][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b14, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)=0xffffffff, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x179}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) r6 = syz_open_dev$audion(&(0x7f0000000140), 0x10001, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000003100200027bd7000fcdbdf2500000000280001000c000b0008000300010000000c00eaff070003000800"/60], 0x3c}, 0x1, 0x0, 0x0, 0x80012}, 0x48c0) io_uring_enter(r6, 0x1ca0, 0x8747, 0x1, &(0x7f00000001c0)={[0x9]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000380)={r1}) syz_io_uring_setup(0x2df8, &(0x7f00000003c0)={0x0, 0x32fc, 0xd, 0x1, 0x24, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000004c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x8, 0xfffffffffffffe01, {0x0, r8}, 0x8, 0x2, 0x0, {0x0, 0x0, r9}}, 0x4) 07:50:29 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0xa, 0x1, @thr={&(0x7f0000000100)="a9cf08c0e02c1acf9ae8bea6441921a322ccec98344f8a26dcd3dec0d604dab717fd2760ec7ddf5a4e3e08450740ee5c754db6a0e0a645c421a71dfb8fb0d67f4617c0c1da2dbadf6f0e453d0a8f7fd2bbbde5bb56d61d56b332c1dcf355", &(0x7f0000000240)="622a2ae99eae3c00f904956972b43c23ef0f9c28a496519d41aeeb8db07cb4b655d24f26cf6e59887a0b814680b7c33247abadde19289c86bd529fa342e828040436f9878b51516c1c80ace4e8235b9ba4a17e8e899bc8138212e7eb7de6b4b6a0fde05fec"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000440)={{}, {r3, r4+10000000}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x2, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x401, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:29 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000000180)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000100)="26218897ce17f6ec7afd163be1b6d096300f420d233e", &(0x7f0000000140)}}, &(0x7f0000000240)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1322.557390][ T26] audit: type=1804 audit(1638517829.306:572): pid=12800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/353/bus" dev="sda1" ino=13984 res=1 errno=0 [ 1322.579756][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:29 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:29 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:30 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) r3 = syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x9735, 0x5, &(0x7f0000001700)=[{&(0x7f0000000440)="c7d20280202cbc5877d47343d71286c1fbc71223daac47ba07ec752b6166fbd3fa735f00fea20235e83aea9bc21bcfb33fcc7df043116e9dea48133494b4aab71a8148c10c171e3d59b1cae22076b954e1dbe2d5f13d0a1acf55311fa7dcae940d80b04a", 0x64, 0x7}, {&(0x7f00000004c0)="8d60b0bba93505a069b78cc1a9d1973c3ee6d89c2140495a65be8b8c571bb4f2376a15fd667f776b3f1b8781408b446b71b684576eabc28dd57728b45c8bfae3842f0f272dbbc63030762a7644587e9d12aad3493ae2e2529271f2755a62f7972ed6bd5b586e19542cc2c49d260525ac77271c70ff4542379cf2b91cdddaff0395af3fbee83e7162750e255f68555010246f2dc19ddf9c573b18de6df5997d4ec94ef758160693fa5d7c066e15f7d2114b0e636dd339fe8caa3f7e433617b35acee6cc768faaee3d2db00ff8287d9f5fd660ddae1e5b764b27ba0272ba9d7404b4bdfe80dead3045", 0xe8, 0x7f}, {&(0x7f00000005c0)="33a2e0562da235275afd4e4482b22b35a2dc6d0d302f7f9660263f28ba13543576bd2b90a51451c9cdeb1b295b02daf91b2388dbbb10246ea568b066058dede4b37a9e6a227f065313efc5b7e623abc253c8e0575b07d945a4de78aa8ed5ec36e48ba31b72801f4a9375b771b7eca2a070c681de327881136d07e4db4e2b", 0x7e, 0x9}, {&(0x7f0000000640)="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", 0x1000, 0x5}, {&(0x7f0000001640)="4a42fc161360a82f6bd92060bc4965a31ae1c06ff1b6488f4e5e094d0ca6f3bafdfd5ffe73fb0da7a2e8849800515dc6fc18080154b118c865d16a21508c359b6cc97a01880796eae71672c63843b5e2d84138751bda4c08949835dd3d38758a1edc224daa7db7d96529a04b0343526b831b63bdd3c8b7e8d1250df6d43eed3b7adc55bedb6fe86bc16809f406724b7931f9cc6744336aa447284364aeb0ac62f30775847edbc8e61f4843da7d4557f64569715adc14cfba84efa84e8bdd", 0xbe}], 0x80002, &(0x7f0000001980)=ANY=[@ANYBLOB="4a2f262c2d875b23299e5d217b7d2d282a7d2c2c242d5c7d2623292a212c2e2c2d21252f2d2c212c646566636f6e746578743d756e636f6e66696e65645f752c6d61736b3d4d52997bd841524541442c686173682c66736e616d653d27295c5e5df7ff66736d616769633d3078303030303030303030303030303030312c7065726d697400000000000000046f2c736d6163526673666c6f6f723d40282c657569643d", @ANYRESDEC=0xee00, @ANYBLOB="2c00746abad32e43c9c6bf7ddf9f2e26e84a6daf1d624f391de098957792ad8c3183a5a321d5bf7c93e6b0e2dcb3ee9a88d6579ef6cd000000"]) fanotify_mark(r2, 0x1c, 0x8, r3, &(0x7f0000001840)='./file0\x00') r4 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r4, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x58, 0x0, 0x5, 0x0, 0x5, 0x20, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x100000001}, 0x4028, 0x7cbd, 0x6c, 0x0, 0x400, 0xffff, 0x7ff, 0x0, 0x1000, 0x0, 0x1}, r4, 0xe, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) [ 1323.231027][ T26] audit: type=1804 audit(1638517829.986:573): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/784/bus" dev="sda1" ino=13973 res=1 errno=0 [ 1323.342491][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1323.486085][ T26] audit: type=1804 audit(1638517830.096:574): pid=12821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/151/bus" dev="sda1" ino=14513 res=1 errno=0 [ 1323.548538][T12827] loop1: detected capacity change from 0 to 75 [ 1323.684809][T12827] loop1: detected capacity change from 0 to 75 07:50:30 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000140)={{r3, r4+60000000}}, &(0x7f0000000180)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:30 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:30 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:31 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:31 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(r0, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000440)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000600)={0x0, 0x32, 0x1, @thr={&(0x7f0000000480)="8c3320a599641a53f5194b6995288f53049a0578c10056234d7850d4e6024c5df2abb66df559d01f266dfbfe50ed19301b750d2e0fda0dad60feba5de684179bf0a3b9f57f270a045b57b621adbdf231b8bde4e8c3337b916b880fb5a5110916ed383f5d6475b14cfffb6fdfe1223c79eaeb98f94d6ded329fd65477ffee302a4769f1681233cc4fcd2e32845d26b42ea6dee6e572ab3d2e5a96bb8939be3c77c8b16f8cf5748ec29adacbbc8f2de2f290c51f", &(0x7f0000000540)="9bc9a4012494ba136f3aa05859b4e2567d167038e44fa4b86ae759e75a87252a8af95bc9c7d370c02a4983468a94a3e0258272b6d1106c93372eaa3b32fae1bbf8a976b65d6d2fc54ae2ebf8264ea729fb6a6edd47db96adcf0adb30bd690f3e31f7a3598f622e6a0567a4939c4090181088c97c1e16ec6f15ab9c0668d5832c6040e16d4ba3e6430184d2e019e0a65676b7ff4cbf7563e9f88256c4d2fdbf46e788e3fb72dd28"}}, &(0x7f0000000640)) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) timer_create(0x5, &(0x7f00000008c0)={0x0, 0x39, 0x1, @thr={&(0x7f00000007c0)="c06a4d01241f78fd68c5a34e2e1e68021163db7f22", &(0x7f0000000800)="d36e188fcc0d5c4aa8dbfd3f413234ed8e51adc3350e5c59d62337d41bcb157758322e0aae5a37f540dec622ad53278bb6a73ad2043b1b2062a88f532b2a90a719fbd2889881d470c1a49b0aa560919a733a309322f5d05195a4686dea09e81d3df8d26c6fa4606a3ea10e7d5ef90375db24e68f911628140ab6dad91e5cbe98d625c689bfc35e7d1d68eec038dc7f61b03e27c894fb7be3d09c039f5a1171"}}, &(0x7f0000000900)) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @thr={&(0x7f0000000680)="fd359be628b6ad37c2", &(0x7f00000006c0)="4b26932920280f4f9487d821ef592703b67b8068e25a1bbcd328ec1317dc229dd7a1e88b1186309b1ff506512598255a91cb4c0b1670654e1c40d16ffdd27f8f91c7273e7346697a2d4fe76b41ceb27475ef7cd7b290b9e8d08a1ea718c23df554cedb72dc3474be0c8ab43b0f5da658760dd62e80af5f008009bb00186af6b0de73a3933d7447f83155ca72119f6c6eed36d7f9c8048466eb2531660f7c279f517e87538ddaa84656cde0397455b846a2a8d5933d01028f07a08a6f61fcbfdb65b9845f8a8d844bf7ae7198297a2e43a50a596a9fb2884843332196178c414d1fee70264f528933be9d85b576696c61"}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r5, r6+60000000}, {0x0, 0x3938700}}, &(0x7f0000000180)) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000940)={0x0, 0x2d, 0x2, @tid=r3}, &(0x7f0000000980)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000380)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) [ 1324.363261][ T26] audit: type=1804 audit(1638517831.126:575): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/152/bus" dev="sda1" ino=13980 res=1 errno=0 [ 1324.396550][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1324.540221][ T26] audit: type=1804 audit(1638517831.296:576): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/354/bus" dev="sda1" ino=13976 res=1 errno=0 [ 1324.606731][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1324.942060][ T26] audit: type=1804 audit(1638517831.696:577): pid=12864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/785/bus" dev="sda1" ino=13993 res=1 errno=0 07:50:32 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r4 = dup2(r3, r2) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) fanotify_mark(r4, 0x4, 0x1a, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:32 executing program 1: timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x0, &(0x7f0000000140)={0x0, 0x18, 0x4, @tid=r1}, &(0x7f0000000180)) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x80, 0x100800) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x20004080}, 0xc0c5) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000240), 0x0) 07:50:32 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(0x0, 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:32 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r5, r3, 0x0, 0x800100020016) [ 1325.792354][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:32 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(0x0, 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1325.949658][ T26] audit: type=1804 audit(1638517832.706:578): pid=12881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/355/bus" dev="sda1" ino=15121 res=1 errno=0 07:50:32 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:32 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1326.043067][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:32 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000100)="d33aa9bc2799dae05833dc48433f8e2efa5e0cb5a4636b7b5c776abb5d8f766c69f6f343a4e3da8652baf3dbd68cf154687513cb4afcfdcc0b67af5d6400d3328ae3ce78a9e362167c77a54b4e0df6f3153e80126f6336b353cad6e9fbb8b661a6fbb320ba", &(0x7f0000000180)="1ab021ff4c966e328ef8002cc14281f7560141e81c6012d8c35097e1e02832308c5e42"}}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) r2 = dup2(r1, r1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x49000, 0x0) fanotify_mark(r2, 0x8, 0x8, r3, &(0x7f00000003c0)='./file0\x00') timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r4 = gettid() fanotify_init(0x1, 0x1) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x54a82, 0x7, 0x8000007, 0x3, 0x9, 0x6, 0x8003, 0x0, 0x9, 0x0, 0x5}, r4, 0x0, 0xffffffffffffffff, 0x8) 07:50:32 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(0x0, 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1326.251943][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1326.269849][ T26] audit: type=1804 audit(1638517833.026:579): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/356/bus" dev="sda1" ino=13992 res=1 errno=0 07:50:33 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:33 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1326.437990][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:33 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r5, r3, 0x0, 0x800100020016) [ 1326.674690][ T26] audit: type=1804 audit(1638517833.436:580): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/786/bus" dev="sda1" ino=14513 res=1 errno=0 07:50:33 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') r3 = gettid() ptrace(0x11, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x703080, 0x0) sendfile(r4, r5, &(0x7f0000000380)=0x200, 0x5) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) process_vm_readv(r3, &(0x7f00000009c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000700)=""/177, 0xb1}, {&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f0000000880)=""/180, 0xb4}, {&(0x7f0000000940)=""/106, 0x6a}], 0x9, &(0x7f0000001c40)=[{&(0x7f0000000a80)=""/22, 0x16}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/148, 0x94}, {&(0x7f0000001b80)=""/138, 0x8a}], 0x4, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xfa01, 0x848, 0x520aa64363f8313a, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180), 0x6}, 0x1, 0x7, 0x7, 0x0, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x6, 0xffffffffffffffff, 0x8) 07:50:33 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:33 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:33 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0425be", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7f1258b743491d3f4facd00b676577ed"}]}}}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x16, 0x1, @thr={&(0x7f0000000100)="00d0b480c8530c62c9eb653dc9da73c728d06370e6c2ffeb603f97bc59c5d3f4455df9ef03d6a9dd3c61657cc842870e73dced04413c699661199474ef0013d766f1c4735e0fd77bce7ae3dbc817c28245505cced2126f87ca80e3135fcf772b0dc54670d426b8", &(0x7f0000000240)="5a2bcd096e85c5a62d57c9335032a785ae98eb5bc0679f18a71ce1ab4607b985b622be7e42cb646cb7ad9453517f2f672bad309eaaab28bc5a9a974a40d9ce95daad1cc33f2cfc4eb7eb1797fdf25789defe6b1c709a61f9ba457d59135d1e3cd39caf1ed5ecdfc128de46851b2338252ae67a182715eaae5a2aac9130"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000480)={{r5, r6+10000000}, {r7, r8+60000000}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1326.875092][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:33 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1326.962232][ T26] audit: type=1804 audit(1638517833.716:581): pid=12921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/357/bus" dev="sda1" ino=13984 res=1 errno=0 07:50:34 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:34 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:34 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020016) 07:50:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) r6 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:34 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = getpgrp(r2) tgkill(r4, r2, 0x21) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1327.715147][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1327.849241][ T26] audit: type=1804 audit(1638517834.606:582): pid=12949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/358/bus" dev="sda1" ino=15493 res=1 errno=0 07:50:34 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1328.075081][ T26] audit: type=1804 audit(1638517834.836:583): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/159/bus" dev="sda1" ino=13962 res=1 errno=0 [ 1328.079871][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:34 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) [ 1328.414044][ T26] audit: type=1804 audit(1638517835.176:584): pid=12959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/787/bus" dev="sda1" ino=13962 res=1 errno=0 07:50:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) splice(r0, &(0x7f0000000100)=0xffffffff00000000, r4, &(0x7f0000000140)=0x3, 0x4, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1328.524539][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1328.614900][ T26] audit: type=1804 audit(1638517835.266:585): pid=12962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/160/bus" dev="sda1" ino=13961 res=1 errno=0 07:50:36 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:36 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) (fail_nth: 1) 07:50:36 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020016) 07:50:36 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000400)={{r3, r4+60000000}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) 07:50:36 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000280)={{r2, r3+60000000}, {0x77359400}}, 0x0) r4 = gettid() timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r5) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {r6, r7+10000000}}, &(0x7f0000000240)) ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r4, 0x9, 0xffffffffffffffff, 0x8) 07:50:36 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000000005}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa3b}]}]}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "eaecf2533113d29b62df00348f6b9b00aea4874a132360573422e145fa079d0e806b03b1012fbd7e8fd729d21aa98b964d1990b7bc318bd57d5b461cdfc82e9fcc81068034f53c36b4cbe816dc8aa4e1227ae2bfada356e587a7150145e199f2f2cb61194dbc91d95891a688702e3318b198128322ec47265bb63c72cbf2a3d50a"}]}, @NFT_MSG_DELFLOWTABLE={0x1cc, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x8, 0x1, 'sit0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a8834d4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b457139}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}], {0x14}}, 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c011) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1329.945504][ T26] audit: type=1804 audit(1638517836.706:586): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/788/bus" dev="sda1" ino=15514 res=1 errno=0 [ 1329.996619][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1330.017218][ T26] audit: type=1804 audit(1638517836.746:587): pid=12980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/161/bus" dev="sda1" ino=15520 res=1 errno=0 [ 1330.054877][T12984] FAULT_INJECTION: forcing a failure. [ 1330.054877][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.106383][T12984] CPU: 0 PID: 12984 Comm: syz-executor.4 Not tainted 5.16.0-rc3-syzkaller #0 [ 1330.115555][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.125725][T12984] Call Trace: [ 1330.129008][T12984] [ 1330.131941][T12984] dump_stack_lvl+0xcd/0x134 [ 1330.136544][T12984] should_fail.cold+0x5/0xa [ 1330.141064][T12984] ? alloc_pipe_info+0x105/0x590 [ 1330.146013][T12984] should_failslab+0x5/0x10 [ 1330.150523][T12984] kmem_cache_alloc_trace+0x55/0x2c0 [ 1330.155821][T12984] alloc_pipe_info+0x105/0x590 [ 1330.160681][T12984] splice_direct_to_actor+0x6f1/0x8c0 [ 1330.166069][T12984] ? generic_file_splice_read+0x6d0/0x6d0 [ 1330.171805][T12984] ? apparmor_file_permission+0x264/0x4e0 [ 1330.177537][T12984] ? do_splice_to+0x250/0x250 [ 1330.182225][T12984] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1330.188585][T12984] ? security_file_permission+0xab/0xd0 [ 1330.194147][T12984] do_splice_direct+0x1b3/0x280 [ 1330.199213][T12984] ? splice_direct_to_actor+0x8c0/0x8c0 [ 1330.205220][T12984] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1330.211473][T12984] ? security_file_permission+0xab/0xd0 [ 1330.217034][T12984] do_sendfile+0xaf2/0x1250 [ 1330.221580][T12984] ? do_pwritev+0x270/0x270 [ 1330.226097][T12984] ? __context_tracking_exit+0xb8/0xe0 [ 1330.231565][T12984] ? lock_downgrade+0x6e0/0x6e0 [ 1330.236427][T12984] ? lock_downgrade+0x6e0/0x6e0 [ 1330.241298][T12984] __x64_sys_sendfile64+0x1cc/0x210 [ 1330.246531][T12984] ? __ia32_sys_sendfile+0x220/0x220 [ 1330.251826][T12984] ? syscall_enter_from_user_mode+0x21/0x70 [ 1330.257734][T12984] do_syscall_64+0x35/0xb0 [ 1330.262164][T12984] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1330.268338][T12984] RIP: 0033:0x7f2c7f1e5ae9 [ 1330.272756][T12984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1330.292371][T12984] RSP: 002b:00007f2c7c73a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 07:50:37 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) rt_sigqueueinfo(r3, 0x32, &(0x7f0000000100)={0x2a, 0x1, 0x3}) 07:50:37 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1330.301148][T12984] RAX: ffffffffffffffda RBX: 00007f2c7f2f9020 RCX: 00007f2c7f1e5ae9 [ 1330.309140][T12984] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 1330.317149][T12984] RBP: 00007f2c7c73a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1330.325280][T12984] R10: 0000800100020016 R11: 0000000000000246 R12: 0000000000000001 [ 1330.333258][T12984] R13: 00007ffc82e75b9f R14: 00007f2c7c73a300 R15: 0000000000022000 [ 1330.341338][T12984] 07:50:37 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) readv(r1, &(0x7f0000002840)=[{&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/23, 0x17}, {&(0x7f00000016c0)=""/9, 0x9}, {&(0x7f0000001700)=""/125, 0x7d}, {&(0x7f0000001780)=""/147, 0x93}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x36, 0x0, @thr={&(0x7f0000000440)="4c0bf6fa85d46ab1197c299301bb7e9e151f930c2026127480bc53fd7a4506c97ee656052efc935cf4df984a87fdc6432e0615b281608a19f0188e0bb56d50cbed1b256fac21c8ec3085b7", &(0x7f00000004c0)="1a4bafd959ed9971ccfaa4ffcf60e53cf346472e490d7e09fc9195fb4532096afef98bbe40b8e94f19bc4cfc97338872339e32ec3ad5cf9c97b1d63ecb7adc8fe26432"}}, &(0x7f00000003c0)) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x88000000}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0xa, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="6760a75db537df33e8fe84dac174c326b22f83712ddcd91c5a05951436f81333d96b5a28ccb7b1331c39a9e144059400d87e3f4dbdc068d76a2f1d1bd5a61de37b6a7caa6a669c17546d", 0x4a, 0x7fffffff, &(0x7f0000000180)={0x77359400}) 07:50:37 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1330.553539][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:37 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:37 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:37 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) (fail_nth: 2) 07:50:37 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r3, 0x0, 0x800100020016) [ 1330.972774][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1330.972791][ T26] audit: type=1804 audit(1638517837.736:591): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/789/bus" dev="sda1" ino=15509 res=1 errno=0 07:50:37 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r5 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r5, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1331.019051][ C0] net_ratelimit: 1 callbacks suppressed [ 1331.019071][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1331.080510][T13018] FAULT_INJECTION: forcing a failure. [ 1331.080510][T13018] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.106908][ T26] audit: type=1804 audit(1638517837.776:592): pid=13015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/164/bus" dev="sda1" ino=15514 res=1 errno=0 [ 1331.147636][T13018] CPU: 1 PID: 13018 Comm: syz-executor.4 Not tainted 5.16.0-rc3-syzkaller #0 [ 1331.156453][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.166539][T13018] Call Trace: [ 1331.169819][T13018] [ 1331.172775][T13018] dump_stack_lvl+0xcd/0x134 [ 1331.177378][T13018] should_fail.cold+0x5/0xa [ 1331.181894][T13018] ? alloc_pipe_info+0x1e0/0x590 [ 1331.186839][T13018] should_failslab+0x5/0x10 [ 1331.191347][T13018] __kmalloc+0x72/0x340 [ 1331.195796][T13018] alloc_pipe_info+0x1e0/0x590 [ 1331.200745][T13018] splice_direct_to_actor+0x6f1/0x8c0 [ 1331.206131][T13018] ? generic_file_splice_read+0x6d0/0x6d0 [ 1331.211951][T13018] ? apparmor_file_permission+0x264/0x4e0 [ 1331.218150][T13018] ? do_splice_to+0x250/0x250 [ 1331.223120][T13018] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1331.229542][T13018] ? security_file_permission+0xab/0xd0 [ 1331.235101][T13018] do_splice_direct+0x1b3/0x280 [ 1331.240136][T13018] ? splice_direct_to_actor+0x8c0/0x8c0 [ 1331.245704][T13018] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1331.251952][T13018] ? security_file_permission+0xab/0xd0 [ 1331.257598][T13018] do_sendfile+0xaf2/0x1250 [ 1331.262126][T13018] ? do_pwritev+0x270/0x270 [ 1331.266639][T13018] ? __context_tracking_exit+0xb8/0xe0 [ 1331.272113][T13018] ? lock_downgrade+0x6e0/0x6e0 [ 1331.276971][T13018] ? lock_downgrade+0x6e0/0x6e0 [ 1331.281830][T13018] __x64_sys_sendfile64+0x1cc/0x210 [ 1331.287032][T13018] ? __ia32_sys_sendfile+0x220/0x220 [ 1331.292345][T13018] ? syscall_enter_from_user_mode+0x21/0x70 [ 1331.298249][T13018] do_syscall_64+0x35/0xb0 [ 1331.302675][T13018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1331.308587][T13018] RIP: 0033:0x7f2c7f1e5ae9 07:50:38 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:38 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) fanotify_mark(0xffffffffffffffff, 0x8, 0x48000008, 0xffffffffffffffff, &(0x7f0000001580)='./file0\x00') timer_create(0x6, &(0x7f0000000240)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000440)="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", &(0x7f0000001440)="c1eb36ee728788575b838dc7701f8b8e54049be03c76fea78a6ba38a474d792075af6252dfc44ce52679bf91b2fa5a946098c9093a3699589c333a46cf55d2315daa8c7303321b30f9647331570d2fd1e9e1da6eaae4c4c9194f5cc3c48c575a3a28e301a766bd77a35af40d83260403fa6c12e7b210a2d1e1db388795c0da20785fcec8cc957d0fba5ba4b2b6babc8352fddac1af52ed33e6f8195ecbce0afe2c295c974a18bbc9d2fb926c2fa6b96e535f4e55384c19018b6c49e547c8bbdf31828ee9951730aa42f6e2fd"}}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000380)={{}, {r5, r6+60000000}}, &(0x7f00000003c0)) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r7, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x40, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xffff}, 0x1, 0x7, 0x7, 0x7, 0x1, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1331.313028][T13018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.333451][T13018] RSP: 002b:00007f2c7c73a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1331.342049][T13018] RAX: ffffffffffffffda RBX: 00007f2c7f2f9020 RCX: 00007f2c7f1e5ae9 [ 1331.350117][T13018] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 1331.358103][T13018] RBP: 00007f2c7c73a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.366094][T13018] R10: 0000800100020016 R11: 0000000000000246 R12: 0000000000000001 [ 1331.374176][T13018] R13: 00007ffc82e75b9f R14: 00007f2c7c73a300 R15: 0000000000022000 [ 1331.382448][T13018] [ 1331.567671][ T26] audit: type=1804 audit(1638517838.326:593): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/360/bus" dev="sda1" ino=15514 res=1 errno=0 [ 1331.582177][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x14, @dev}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x44}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000006c0)=""/7, 0x7, 0x2062, &(0x7f0000000700)=@ll={0x11, 0x16, 0x0, 0x1, 0x3c, 0x6, @link_local}, 0x80) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x402200, 0x0) fanotify_mark(r7, 0x5, 0x30, 0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00') sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) r8 = syz_mount_image$pvfs2(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x5, 0x1, &(0x7f0000000280)=[{&(0x7f0000000440)="6459672174d4d8cefd6649be60b1086a309856df6708cd5404ec09299f61a3ee46b2592dfec615e23c0df181cd0bbac7e95082c018834f0d7ba4e195df3384ee092dc5da462ef7965762a9555ddf6a3c769e392e7dcde1d585ad8d7e9b80d87a22c1f14d8c9b037a7a0be87222d051017df4c20c4026a170856b873e1a5fc825da8a3d99b6a4f3fd17b73e05b96d2c2f1c959e54593a9d3150cc7cce37a5a58eb4b1efef22c5ee736cb034e9262ad1016ce5", 0xb2, 0x7}], 0x4048, &(0x7f0000000500)={[{'('}, {'(.!\\}\xc4\xe6'}, {}], [{@measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_type={'obj_type', 0x3d, '&'}}, {@audit}, {@fowner_gt={'fowner>', 0xee00}}, {@appraise_type}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee00}}, {@seclabel}]}) ppoll(&(0x7f0000000380)=[{r1, 0x210}, {r6, 0x2ae7d21647dcda98}, {r8, 0x21}, {r1, 0x80}, {r1, 0x1020}, {r1, 0x19c}], 0x6, &(0x7f00000003c0), &(0x7f00000005c0)={[0x2]}, 0x8) timer_settime(r3, 0x0, &(0x7f0000000140)={{r4, r5+10000000}, {0x77359400}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1331.670238][ T26] audit: type=1804 audit(1638517838.336:594): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/165/bus" dev="sda1" ino=15532 res=1 errno=0 07:50:38 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) (fail_nth: 3) 07:50:38 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1332.032581][ T26] audit: type=1804 audit(1638517838.796:595): pid=13045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/790/bus" dev="sda1" ino=15511 res=1 errno=0 [ 1332.133787][T13050] FAULT_INJECTION: forcing a failure. [ 1332.133787][T13050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1332.149382][T13050] CPU: 1 PID: 13050 Comm: syz-executor.4 Not tainted 5.16.0-rc3-syzkaller #0 [ 1332.158162][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.168414][T13050] Call Trace: [ 1332.171694][T13050] [ 1332.174631][T13050] dump_stack_lvl+0xcd/0x134 [ 1332.181343][T13050] should_fail.cold+0x5/0xa [ 1332.185864][T13050] prepare_alloc_pages+0x17b/0x570 [ 1332.190989][T13050] ? find_held_lock+0x2d/0x110 [ 1332.195762][T13050] __alloc_pages+0x12f/0x500 [ 1332.200353][T13050] ? xa_load+0x12d/0x280 [ 1332.204606][T13050] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1332.211375][T13050] ? xas_start+0x157/0x730 [ 1332.215807][T13050] ? xa_load+0x14f/0x280 [ 1332.220061][T13050] alloc_pages+0x1a7/0x300 [ 1332.224485][T13050] folio_alloc+0x1c/0x70 [ 1332.228766][T13050] filemap_alloc_folio+0x8e/0xb0 [ 1332.233708][T13050] page_cache_ra_unbounded+0x36a/0x940 [ 1332.239179][T13050] ? read_pages+0xfa0/0xfa0 [ 1332.243695][T13050] ? lock_downgrade+0x6e0/0x6e0 [ 1332.248558][T13050] ondemand_readahead+0x594/0x1090 [ 1332.253697][T13050] page_cache_sync_ra+0x1cb/0x200 [ 1332.259251][T13050] filemap_get_pages+0x2b2/0x1be0 [ 1332.264318][T13050] ? is_bpf_text_address+0x77/0x170 [ 1332.269553][T13050] ? filemap_get_read_batch+0xad0/0xad0 [ 1332.275126][T13050] filemap_read+0x315/0xeb0 [ 1332.279891][T13050] ? find_held_lock+0x2d/0x110 [ 1332.284676][T13050] ? filemap_get_pages+0x1be0/0x1be0 [ 1332.289973][T13050] ? aa_file_perm+0x56b/0x1180 [ 1332.294769][T13050] ? lock_downgrade+0x6e0/0x6e0 [ 1332.299640][T13050] ? aa_file_perm+0x595/0x1180 [ 1332.304847][T13050] generic_file_read_iter+0x3b6/0x5a0 [ 1332.310233][T13050] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1332.316843][T13050] ? __fsnotify_parent+0x498/0xa60 [ 1332.322270][T13050] ext4_file_read_iter+0x1d4/0x5d0 [ 1332.327401][T13050] generic_file_splice_read+0x453/0x6d0 [ 1332.332962][T13050] ? folio_flags.constprop.0+0x70/0x70 [ 1332.338751][T13050] ? security_file_permission+0xab/0xd0 [ 1332.345361][T13050] ? folio_flags.constprop.0+0x70/0x70 [ 1332.350937][T13050] do_splice_to+0x1bf/0x250 [ 1332.356362][T13050] splice_direct_to_actor+0x2c2/0x8c0 [ 1332.363118][T13050] ? generic_file_splice_read+0x6d0/0x6d0 [ 1332.369070][T13050] ? do_splice_to+0x250/0x250 [ 1332.374098][T13050] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 07:50:39 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1332.380633][T13050] ? security_file_permission+0xab/0xd0 [ 1332.386201][T13050] do_splice_direct+0x1b3/0x280 [ 1332.391973][T13050] ? splice_direct_to_actor+0x8c0/0x8c0 [ 1332.397544][T13050] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1332.403907][T13050] ? security_file_permission+0xab/0xd0 [ 1332.409904][T13050] do_sendfile+0xaf2/0x1250 [ 1332.414763][T13050] ? do_pwritev+0x270/0x270 [ 1332.419259][T13050] ? __context_tracking_exit+0xb8/0xe0 [ 1332.424795][T13050] ? lock_downgrade+0x6e0/0x6e0 [ 1332.429636][T13050] ? lock_downgrade+0x6e0/0x6e0 [ 1332.434586][T13050] __x64_sys_sendfile64+0x1cc/0x210 [ 1332.439785][T13050] ? __ia32_sys_sendfile+0x220/0x220 [ 1332.445078][T13050] ? syscall_enter_from_user_mode+0x21/0x70 [ 1332.451076][T13050] do_syscall_64+0x35/0xb0 [ 1332.455501][T13050] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1332.461414][T13050] RIP: 0033:0x7f2c7f1e5ae9 [ 1332.465817][T13050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.485522][T13050] RSP: 002b:00007f2c7c73a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1332.494181][T13050] RAX: ffffffffffffffda RBX: 00007f2c7f2f9020 RCX: 00007f2c7f1e5ae9 [ 1332.502408][T13050] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 1332.510998][T13050] RBP: 00007f2c7c73a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.513913][ C0] [ 1332.518995][T13050] R10: 0000800100020016 R11: 0000000000000246 R12: 0000000000000001 [ 1332.521317][ C0] ============================================ [ 1332.521325][ C0] WARNING: possible recursive locking detected [ 1332.529541][T13050] R13: 00007ffc82e75b9f R14: 00007f2c7c73a300 R15: 0000000000022000 [ 1332.536104][ C0] 5.16.0-rc3-syzkaller #0 Not tainted [ 1332.542234][T13050] [ 1332.550167][ C0] -------------------------------------------- [ 1332.550175][ C0] swapper/0/0 is trying to acquire lock: [ 1332.571055][ C0] ffff888072551130 (&runtime->sleep){..-.}-{2:2}, at: io_poll_double_wake+0x2be/0x820 [ 1332.580652][ C0] [ 1332.580652][ C0] but task is already holding lock: [ 1332.588018][ C0] ffff888072555130 (&runtime->sleep){..-.}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 [ 1332.597809][ C0] [ 1332.597809][ C0] other info that might help us debug this: [ 1332.605859][ C0] Possible unsafe locking scenario: [ 1332.605859][ C0] [ 1332.613467][ C0] CPU0 [ 1332.616731][ C0] ---- [ 1332.619988][ C0] lock(&runtime->sleep); [ 1332.624383][ C0] lock(&runtime->sleep); [ 1332.628962][ C0] [ 1332.628962][ C0] *** DEADLOCK *** [ 1332.628962][ C0] [ 1332.637081][ C0] May be due to missing lock nesting notation [ 1332.637081][ C0] [ 1332.645375][ C0] 2 locks held by swapper/0/0: [ 1332.650113][ C0] #0: ffff8880222cd110 (&group->lock){..-.}-{2:2}, at: _snd_pcm_stream_lock_irqsave+0x9f/0xd0 [ 1332.660443][ C0] #1: ffff888072555130 (&runtime->sleep){..-.}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 [ 1332.670627][ C0] [ 1332.670627][ C0] stack backtrace: [ 1332.676517][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.16.0-rc3-syzkaller #0 [ 1332.684490][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.694538][ C0] Call Trace: [ 1332.697799][ C0] [ 1332.700625][ C0] dump_stack_lvl+0xcd/0x134 [ 1332.705213][ C0] __lock_acquire.cold+0x149/0x3ab [ 1332.710308][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1332.716287][ C0] lock_acquire+0x1ab/0x510 [ 1332.720766][ C0] ? io_poll_double_wake+0x2be/0x820 [ 1332.726032][ C0] ? lock_release+0x720/0x720 [ 1332.730689][ C0] ? __lock_acquire+0x162f/0x54a0 [ 1332.735698][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 1332.740879][ C0] ? io_poll_double_wake+0x2be/0x820 [ 1332.746144][ C0] io_poll_double_wake+0x2be/0x820 [ 1332.751254][ C0] __wake_up_common+0x147/0x650 [ 1332.756087][ C0] __wake_up_common_lock+0xd0/0x130 [ 1332.761354][ C0] ? __wake_up_common+0x650/0x650 [ 1332.766361][ C0] ? snd_pcm_hw_rule_ratdens+0xc50/0xc50 [ 1332.771976][ C0] snd_pcm_update_state+0x46a/0x540 [ 1332.777153][ C0] snd_pcm_update_hw_ptr0+0xa75/0x1a50 [ 1332.782611][ C0] ? lock_release+0x720/0x720 [ 1332.787269][ C0] ? snd_pcm_update_state+0x540/0x540 [ 1332.792625][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1332.797634][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1332.802557][ C0] ? __hrtimer_run_queues+0x51a/0xe50 [ 1332.807905][ C0] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 1332.813362][ C0] ? dummy_pcm_copy_kernel+0x10/0x10 [ 1332.818644][ C0] snd_pcm_period_elapsed_under_stream_lock+0x15a/0x230 [ 1332.825578][ C0] snd_pcm_period_elapsed+0x28/0x50 [ 1332.830763][ C0] dummy_hrtimer_callback+0x94/0x1b0 [ 1332.836039][ C0] __hrtimer_run_queues+0x609/0xe50 [ 1332.841231][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 1332.847195][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 1332.853252][ C0] hrtimer_run_softirq+0x17b/0x360 [ 1332.858353][ C0] __do_softirq+0x29b/0x9c2 [ 1332.862857][ C0] __irq_exit_rcu+0x123/0x180 [ 1332.867518][ C0] irq_exit_rcu+0x5/0x20 [ 1332.871758][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 1332.877386][ C0] [ 1332.880315][ C0] [ 1332.883223][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1332.889392][ C0] RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 [ 1332.895289][ C0] Code: 89 de e8 8d a8 30 f8 84 db 75 ac e8 a4 a4 30 f8 e8 ef e8 36 f8 eb 0c e8 98 a4 30 f8 0f 00 2d 91 04 ca 00 e8 8c a4 30 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 07 a7 30 f8 48 85 db [ 1332.914966][ C0] RSP: 0018:ffffffff8b807d60 EFLAGS: 00000293 [ 1332.921029][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1332.928996][ C0] RDX: ffffffff8b8bc6c0 RSI: ffffffff89470634 RDI: 0000000000000000 [ 1332.936947][ C0] RBP: ffff8881433d3064 R08: 0000000000000001 R09: 0000000000000001 [ 1332.945001][ C0] R10: ffffffff817def48 R11: 0000000000000000 R12: 0000000000000001 [ 1332.952950][ C0] R13: ffff8881433d3000 R14: ffff8881433d3064 R15: ffff888017b1c004 [ 1332.960991][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 1332.966089][ C0] ? acpi_idle_do_entry+0x1c4/0x250 [ 1332.971376][ C0] acpi_idle_enter+0x361/0x500 [ 1332.976139][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 1332.981237][ C0] cpuidle_enter+0x4a/0xa0 07:50:39 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1332.986769][ C0] do_idle+0x3e8/0x590 [ 1332.990843][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 1332.995847][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 1333.002070][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 1333.008309][ C0] cpu_startup_entry+0x14/0x20 [ 1333.013055][ C0] start_kernel+0x47a/0x49b [ 1333.017538][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 1333.023504][ C0] 07:50:39 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:39 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x52d400, 0x0) recvmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000001340)=""/131, 0x83}, {&(0x7f0000001400)=""/246, 0xf6}, {&(0x7f0000001500)=""/159, 0x9f}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000015c0)=""/88, 0x58}, {&(0x7f0000001640)=""/247, 0xf7}, {&(0x7f0000001740)=""/184, 0xb8}], 0xa, &(0x7f00000018c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001940)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f00000019c0)=""/141, 0x8d}, {&(0x7f0000001a80)=""/172, 0xac}], 0x3}}, {{&(0x7f0000001b40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/43, 0x2b}, {&(0x7f0000001c80)=""/26, 0x1a}], 0x3, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x3, 0x10001, &(0x7f0000001e00)={0x0, 0x989680}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) r5 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r5, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000001e40)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2000, @fd=r0, 0x0, 0x575f, 0x1, 0x10, 0x1, {0x1}}, 0x7) sendfile(r3, r1, 0x0, 0x800100020016) [ 1333.145852][ T26] audit: type=1804 audit(1638517839.906:596): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/166/bus" dev="sda1" ino=15501 res=1 errno=0 [ 1333.149687][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1333.244114][ T26] audit: type=1804 audit(1638517839.976:597): pid=13060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/791/bus" dev="sda1" ino=15530 res=1 errno=0 [ 1333.272584][T13038] orangefs_mount: mount request failed with -4 07:50:40 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket(0x2, 0x803, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x3, &(0x7f0000000080)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x200000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r4 = openat$sysfs(0xffffff9c, 0x0, 0x189b01, 0xc2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x8084) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) syz_open_procfs(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1333.399763][ T26] audit: type=1804 audit(1638517840.126:598): pid=13069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/361/bus" dev="sda1" ino=15532 res=1 errno=0 07:50:40 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:40 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000203010100000000e100000000000000"], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:40 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) [ 1333.714707][ T26] audit: type=1804 audit(1638517840.476:599): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/362/bus" dev="sda1" ino=15532 res=1 errno=0 [ 1334.026323][ T26] audit: type=1804 audit(1638517840.786:600): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/791/bus" dev="sda1" ino=15530 res=1 errno=0 07:50:41 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:41 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:41 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:41 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) timer_delete(r1) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000380)) timer_create(0x5, 0x0, &(0x7f0000000240)=0x0) timer_delete(r2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000140)={{}, {r3, r4+10000000}}, &(0x7f0000000180)) r5 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r5, 0x9, 0xffffffffffffffff, 0x8) 07:50:41 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x14, @dev}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xa0, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ftruncate(r0, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x30001, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r5 = syz_io_uring_complete(0x0) sendto$inet6(r5, &(0x7f0000000180)="d1f1bd50e214b7bff84c623a1fa4e3e3f3ac1cecdcd001da11e3f710fb8d1a72625bcc4199f45d1946e8cdeb29ffcea920ede0fec54cd776804fabe283383648e92a1fe47393e71bb74085ecf4b47b23f173ace7e98514c428032f542bbe5d72f2d8055961faf18a3b7d50a975a48ed4f03978ee5a9d96704102ae112c40202c99edcb2b86bc578f260c5f6f41e6884254a12cd2eff16a4c03ba8023242b30ee3c34bd504c5cb3a45ca8503a7ec04de64f799cc110cd9ea5", 0xb8, 0x20040094, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}}, 0x28) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x8c400, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffffbff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:41 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x20, 0x0, 0x4, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00007de000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000180)) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000080)={0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) gettid() [ 1334.563055][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:41 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) [ 1334.592832][T13118] ptrace attach of "/root/syz-executor.1 exec"[2874] was attempted by "%  D %  ] &  t `&   &   &   '   `'   '   '   (  : `(  W (  n (   )   `)   )   )   *   `*  - *  J *  f +   `+   +   +   ,  \x0d `,  \x0d ,   ,  \x0d -  \x0d `-  \x0d -   -  (\x0d .   `.  : .  H\x0d 07:50:41 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:41 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:41 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:41 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:41 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:41 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020016) 07:50:42 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:42 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1334.605632][T13118] ptrace attach of "/root/syz-executor.1 exec"[2874] was attempted by "%  D %  ] &  t `&   &   &   '   `'   '   '   (  : `(  W (  n (   )   `)   )   )   *   `*  - *  J *  f +   `+   +   +   ,  \x0d `,  \x0d ,   ,  \x0d -  \x0d `-  \x0d -   -  (\x0d .   `.  : .  H\x0d [ 1335.541919][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:44 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x8, @tick=0x4, 0x7, {0x2, 0x1}, 0x0, 0x2, 0x40}) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:44 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x800100020016) 07:50:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './bus\x00'}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x5, [0x5, 0x3, 0x7ff, 0x5, 0x81, 0x2, 0xfff, 0x100, 0x8, 0x2, 0xc72, 0x1, 0x3, 0x7, 0x0, 0x1, 0x6, 0x100, 0x7, 0x200, 0xa1, 0x0, 0xe9, 0x8, 0xb42, 0x8, 0x2, 0x1, 0x400, 0x3b50, 0x3, 0xfffd, 0x3800, 0x6, 0x8001, 0x7ff, 0xff, 0x4, 0x8, 0x3f, 0x7fff, 0x0, 0x7ff, 0x2, 0x1, 0x5, 0x80, 0x800], 0x6}) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:44 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r1}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {r5, r6+60000000}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:50:44 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) r1 = fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x4081) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) rt_sigqueueinfo(r5, 0x10, &(0x7f0000000440)={0x2d, 0x5, 0x100}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3c, 0x4, @tid=r5}, &(0x7f0000000380)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) 07:50:44 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1337.583695][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1337.583712][ T26] audit: type=1804 audit(1638517844.346:611): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/169/bus" dev="sda1" ino=15580 res=1 errno=0 [ 1337.591066][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:44 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) timer_settime(r2, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) 07:50:44 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) r4 = gettid() rt_sigqueueinfo(r4, 0xc, &(0x7f00000002c0)) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x2, 0x30, 0x80000001, 0x4, 0xca, 0x721, 0xa, 0x2, 0x37db}, 0x0) 07:50:44 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) r3 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1337.685586][ T26] audit: type=1804 audit(1638517844.346:612): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/793/bus" dev="sda1" ino=15581 res=1 errno=0 [ 1337.731465][ T26] audit: type=1804 audit(1638517844.416:613): pid=13187 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/367/bus" dev="sda1" ino=15577 res=1 errno=0 07:50:44 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x800100020016) 07:50:44 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r1, r0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:44 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x1, 0x80000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{r1, r2+60000000}, {r0}}, 0x0) r3 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r3, 0x9, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000240)={{}, {r6, r7+10000000}}, &(0x7f0000000280)) 07:50:44 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x800100020016) [ 1337.977458][ T26] audit: type=1804 audit(1638517844.736:614): pid=13206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/368/bus" dev="sda1" ino=15579 res=1 errno=0 07:50:44 executing program 3: pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r1, r0) r2 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1338.208108][ T26] audit: type=1804 audit(1638517844.966:615): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir179117082/syzkaller.JuQGXB/369/bus" dev="sda1" ino=15579 res=1 errno=0 [ 1338.413553][ T26] audit: type=1804 audit(1638517845.176:616): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/793/bus" dev="sda1" ino=15581 res=1 errno=0 [ 1338.474786][ T26] audit: type=1804 audit(1638517845.226:617): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir176046946/syzkaller.aWoNDj/793/bus" dev="sda1" ino=15581 res=1 errno=0 07:50:45 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001a00)={'syz0'}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f0000001500)={0x0, &(0x7f00000014c0)=[0x0], 0x6}) renameat(r0, &(0x7f00000000c0)='./bus\x00', r5, &(0x7f0000000240)='./bus\x00') sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @mcast1}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000140)="4de27b7ccfdbcfe4b7eaa26825695734255c808c9d10d759c31989fdde30cac2dd238721223419dad73a80282396395e2955d9d2d20b77aa942435de60ef753b06320b45a17a29c1740bdc337118ddc71aac8111f871c230582a680d4baece3d5ba6116d25b1d3b5402f2e488a218aba53e2879bfb6b650d176be1322a60e99a604d41f04bbcb826da5340769546026cc919513deabe5310eddb5f52dc2ca0fb0df2fef1ca0d5cff62035f384527e81a8caab8831f65024b6fda7035d1d5e5e906b66f933d11cd1547f4155521b305abd67b", 0xd2}, {&(0x7f0000000340)="0eaa5e41f110894c366d251edb6b0e3b772bebb6e2293aa41b82be231fb47fff34ac3b20c573524adb50758a838656f454804219e47f7336c315d17e8bc4e1dd713b2a66073707dfb70c1d206cdb8d1d515a9530546dbc73587df84a0b1a6a7303f60eef1e5f93faee31ab349542000ea0a0fefec45c3573759fd3e197839bacaadd0c048ee6bc2a153085e518b4e56f11acaf85904a", 0x96}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="0e14e08c11b54e514c901a200146ca0b3368afb12aae43fe88c0e494dd02d989a176c653e86f9b2dd998e12693ee69672a547e2fc2b028d48f2e5ffacc5bc4ded25b44ac261e5d258426a1abd9affb6cb85251d968c9b30fcb7079d03e8cf19554a2e99b58abb8cf65e38fd62fcb34c7abde0e945ae0ca1ce6f71f0a2226e8fe7e3257691bf7fde3ba87f735bbb63599fecffc23e7e305aac082f5f9805ad4d66c695041174705f4fa3e2619ae80", 0xae}, {&(0x7f0000002040)="ea3bab6caf0a300d66a8891a73895129c9dd5eff606a5a0d01df9014ec9406fc6680b4fa85a6d297b31b42bfb8c79ea581501d2c5f6310e6afc484606c330ad61acaf7a52d40fe116d2802273fb83b396e6742a1710789b4338ad4c32cba10c4ef57cbd2b290e6dd8f0c24e4a6d2e23847070971a98a7514c4353d5f14e2a30e55ad49704f23cd10e5b31bed556ea7af7ca1fcd944817003ba44afba8450eb75a065286e02dfdebad2d3eeb13f3c3384e3d5aa8c00a1891a8d2b32e93734478a9acbec2219ee2b021b511fb8168ce272840afa7cd3fd467be83771e53c359ec14fee2d8de8083b28dd73363c271bf8ebb16b24cfaeec5adc8d255f216448e7225966d1a0898a2d0708db68a5d0b33397907fc481b6ca33e9a8bfc8622bcd39314a86b309dbfe60f0985d52def640d79ba96a68977f44c94d62b5fc229b5f1d06fd53b178cd9244045838fe9f5d2b60fbe1b4f762eec86d191990d512a7a5d01ab0624fbdcfc5c9f9bdde1971463228316ff09c88378012ffad7ae4a66ffccf118cc24b98eb02a25b3b7f1e9eb7e692336991d1c69cafb12bf3ca32b4372df2a5200a6c3241890e26a91f153e44335fff562d77ddbd542b6ed4f2d4357c4b709b3394ff59d0fe2949ff210935c2c1d5bd50eeb45bbd47c8c3e442e40e227eb737f1b4cdaba4a78c74dae304cdaa1a08f906fb154bea0e8c61ca884de53894d44b3d8bd4ee82bdb8ca555d63ec13fa9d890bf4be7d5958f01196df0a34d9975f11a524daa54cd2b02b08b2e1ef4a2a4c6c89b4a1aa06beb9e7e7ce190814903ea698cc524c9d29054b435c3557f672cb87573e6af97dc18c832a72e67e5dbced4a378d20a76c1fd5d4c2a2ab499bf8cf99f70f62af2829d2cbd94ef205064d2f8eb223ea222e0a18c51aef399d6e0ea25062aaefabfcfce95120c0df8bd2c1bcacfd6136fe069bc11e54f5f1716d7267610d62acde39cb3d42b07ee242f855f74e5721ff296ea431bb7bf8d67b075f83b7a33c06a8e34513ee7f3c811d1766d02b6b9a5f037f8b57ad77ff303a7cc92d33d8ed8d112c14ab46b88a9d891e9590a95e2f6a172bc9c85e35b83a8c226b19b720e818d48f0cd846f588469b205a843854f817d86b845b0b62b69721c1bc0ae31ca0a1ada2934d98627a981d24e8ec9c5ab6418ab242e7965b1d0b40240c7cf012bd9c0038f7069371a37e9aa0dd9425ed29def383abc9945e9317b63291547dcafc0fd771a0087d938b05d716d42a191faa193dae88196b292b2ce946dde9d8f91abb6967f7587a7a1711d5fd8b149fa41422bd3d4000428a1f5f3cb632bd9e61f5c325c673b4daaf290799173d8d18c35d207ba303c4fb20caf029742186663ef4aa36aa80a3de35609f4677d771107aeed4f2ab86a14f6d9ddb3904a99a3abc3c60fcb230b74a77aab367676f6f4d3e451fcf9a3b3b5566cdc8e2bc7d95e6d6d50c286b57389d510aeeb6d792074d4c1f41e8d3b956d768ffbe095df618d5270854d51f34483f4e47c4ba9f79f3fb97ea4c45552f07287c664742382de2f2986f012c993fa4b11fa80343d5f857ba7be6ab1ebdf1c15bf0d58f91943d66a019aba6374c73bc5f7369c8f04e91a3faa2a4a15caa21cb1030757a4f016340b3cdc15520fb6870003942344079848481a54b6658936c439bd6b06e0847c8126cdd0e0da07fc9c32bb4709dbdf9a47df52b829c30449b47777d5b72a292e6d78428250d49a476cf9d4912d0f676a4b0388a2916d840c246becd6ffd0d541a28d3ba6a99d1ef94d7c1104c29adfac156989bf33a6797744f0b40691c21dacfd07cb0eb24599ad77debd3480fc137b4cbed08d5ff7bcd9d12b3952785f6155b4aaa8a53c8252ee7a8d514e91cd5702e21836f860cd36076e1c03e7e814083cdadcbe825fb785a0075bfb319f065d8c8d6402103862cf5619dda6a593426aeeeaf77a394bb3b2b9637b7e43770b0ec1876bb98318312bca87f1f160b8a89ac5874c09a435244eff8ba2d8bc8929f38eeff9b6a0e4c0762e3fecb1e4482584df675963e414c9f4f9affb43f544a0ee5dceeff95bc02904b485e21becc27cf4f4d2148f13a590dd04c19db0282328977bc00f72f4162bbd2bee1f8c875fb16d45f7da95245937dcf983dc0d5df44fa9969b9cce7dc27d711efd662e07088dfe0b85fb88d5f1800db4b4efe354802345f68e794d9d166c75d5ed39eb5c47184e2be1b0ae1b20caafc717b4813356efdce876bc5985f4573abcf361573ef22217f0a68debfd082be0318c1596af2e6e9aff31aeb1108f496b39555dc8d7cfcace36eafac162e2bf2842dfeefe459100cb9b53bfc97e47d8ff5816d9fb6a241cea604ed9dc4ec06a34704e7cd66dac529029f530caae689a773f6203794d20bcbcc1be1970a6b3be54706951e7322875851a4b1f07dea600a9010f5f089cee6de4c4c7c07ab3cf44f0307a8d18a86bc7561f247c4ed9296032f9b5d49507dd234edb86fcdb984615e2342bf1b3afdb6759b58e022f5b99e27ea1334147044e78bc3acd697daf47ca7a0d51a8bd27e2d82845ead8b3a29905d9c23c3cc5aa8eb941a36ec0fb9e61a0b3e2cfc1cb086bbe82892f6a533f78b4d6d422f49b71143c217f65a252f32303408839146619c9c1de2d6a204d1f9371933522301c28614c1b8806fcbd735628e6d318129249d3d3460af5cb88116aaf88f96e194166a502667035fc54f5f0aab769d568189d378b1fcc8875d24d0bf661a29c4264be71b49f7b06b3c31a55fe4a7e9b6d3518438e493a35b039a91983047e4e0ff78a8483646001c548539258ca0c7c8da28fa7ed3f7c30815392f4fb0f78327bedd151069ced6b2e2083fd786fbeac9e812e31c0b22ec53d9dc058cc342220ddd5fbd55036c10ef1f644259edc1eac77369ba53cd67b1ab6c54dd85c8effff7d957fa4e7ccfa6a69ec5943760aab5fec64e8c3262501a2e1c501ca2ecca1f24c592ac9c8f47a53c49ebc7755ae6aa020528fb0bdc2cd1c2420257094124dfe571b6ea7c7cd6428e2f64eafa136581515949c5ba73299f14499d3dfdbfed41cf37ed962120f27bb93d6a8ec0a6690bdff4c984671eadd3c8f82495d3b57aadb2ca71acf4f7bb65a7472da68fc37fdb822f1831d0cb3c129b7c45253b137afdc5444f4d311b53434f7231c6831c5e46d3c55988b401ec82fdb43902c81a0d0e677e7c69c925d7e561cd023fd297b5de508d98a33f120921e25cc991e64a7c1c215ebb1daee92603845e4517ebd3cad74181ffe715a7a81d016c09c54ceafeb7da51424f999f1ae4b957a8482c89d097d182601470af6f176a93315c9867fc07ff4f4321c11f1bc0e8e7a0b27bc62f893a5fc2482237e828c831038aee5f6e1abf73491087cf8802689d377ffeaa163f6ab8f0e46c00da83cdc959f4479736284eab013559d5aa16afce30b7493bebe95d80bda87e4ab3e821ed35f5db2de9995597060c477f1407f8f82b54cadb390bf414660dc9d7ce5d6a784165bfc216a2dd45b62cf3894bacdd72b2a7b4a944fb26e9e18d8192caaffbd188dcbf13b33fdaea2fa9ae1b054c484c1343ad3fb76490f051f41bc6ee5f42859ec2a6edc07a049c75b4ec36c2755e140228768e3333f072e3f302428d82061fefde4832b8abd6b929481e5ca7c47286a62e52edb2c791024bc122916322f9f286f8f9240cf755ae97707d3e8521f973d308e29451c6f01133602ce30c6f9ac4ec2c76bde93d669a1c184c8e48d8472d735c77af49358e282e9dddee81346ebd7abc47eea90e19c2b23e613ca68122935e9154f14c35ee9d383397aaf0d832ffead3a4135b10aeef2c5938c6f0ef320db4aa50c1d8eb9f7e9312e97350d64afb503496eeba1f7dabffe38aa0195c8dce623b78244468fc270a71a01c2860f67ab0af67a1ea1433148003ad730e84ec665f4982291f9334a46f97c75beecd456de1e6f928ec6a2e019c46ecd62b95a6702b2d8525c842a91dce467f29485ef2a4393d3bf08bf9773fc0150f5585dcf438e573fba6788c702f41de490adfa578ab886e495ffb19450d6c14e6fa76c4effb32598fae025d84ee51d6838760687ec204b9535fb17324ab2fe24a53e790cde0dcd7ff40942abe668132bff4ac494551f3c04676662486d078c83cf7d23b8b1705a74617857a9079d623eed053111554eff7f851f94b8532bef952b36bd9bfd3b26699d39c956f71384f9121eeb8213597a20abedc975fe98e1ae17176b974827b4edead2e25d76e8f6ce36523e626e7c2aad3af4d9313fd5c63464b33d72e2632f9ea538a4894f0bdfe4d615c3071225c3a766cc3742b3bb1b716dc63e7c670c2abc23234e17e950e661eba34960ee8d5ebf09cc8a688604ac1cfcbd526d1a44ceee780ecb2e359cd41a7da0481ae7d15a587aee65376a0d9f0fa4e5728f18cee36ae00c48b09970287dad559b9498ebdd846502807f9f9a33e0c46fcbe7c80ea7b488793a1e6089f3124d7d5eeafbdbe240ab7ec6be3e8ae9f8f67b91ed0eb7f45adf83df727d2919a599f1acc2d110ffecb530edb2927e9546173f14c84e85cd28b4a17e95db892ebdd5f22059eac002823821002308c8a84ddd9f936e695910f5253f46ac08d866c0963a6e476ee3fc23d88bb47e78aacf1a88ae7467a8578179b1fe43c304c30f40e372366d719fad70d45643937c14af6c53e508e3d25ccadfc4f5762f2be4d9a2b67b2aee316a4599a7d52b28c7d7899063717c26470244e0f3504c4cd92d1ebdef72bcca18253b38fd1941fc7635c7bb5b55ef1e70ec698cea6421bf7e637a04ce81c9c95d373e85e9b6af38ca5ddef5e066a002975bb43fd0e92d225c73f226755a4ee62b6be266bd4800be1a61dae86aab4ca279530b9cb83445c9a25c6f8aa6e0c32c9595ac8a4a811830593e77895d0640ac85f6a9fadceb093ca7afe6cdbc1dc700f89a1b0323cbe3c958c9adc3ec5eff0e67a84ff69b7adcf69b2bf497989233e87d956d885b8787b3b3855c264dc9e31fb7c9685dac2024bc0bead9bc1fb9bfc9a6a7c7169946b6a6eee4583a77910e3398a7f93aaa9dbd3ab7010db17b4f772c4d5c8d76cd8e7b74b81d92e0ca12127305e658306c8a229201ce95cff2a1e3ea9271af7fd5dc818c12af6183611cf5af3d37c3e071a1a280f8562aadc12e5cf1343493d04911b6d56a99d4e7cafd0e30c587f361b937ce9889b0cfbaa939c79e8ff60acdfc6b51b3370880fed3d7b7692aea4a5a658876364aee7c4898b2b62473c3ab868b2d6bafc7415c0470197febfb88f08c969341b1a081bc24def8aad988538b0efd6d6a98d6db80bb2d78058f0f904ea37c6dea44534bdbfb414b39fada49f8eb7552291b717524eb133a8f32a071e03d0c3b09f4dccd3af627ea8cb430b7a62d8e99e2b73aa120f0eb34820e4f73d07bb817ec82300da22e2ca7faf8f39b2a316bbac0c6035f5eeb511eadd0856e41a2b6042a744d1ede291b28597166f21a20bc2108ab4cd0d92e7e67098c3223fb617e299f864f21e044f5977a773edaa89846b5352ea597b27e82ca123f5dff0458c5cf30d2ba343c8b52f5eb4f9b0b119b36d45086701341233c25601e90c4d70e2e48a83ad045b670619091cf9e66233773a774ec6c1299d7ae77c13700dd4095faacecea0341461a9639d2cd132a1eea3345cc0c1f8f77ac8b8efb32354c936bf82a9fc71cd90206057c6e30fae2070beb7d2bf4a62e3446a68dedb35de5e6b11fbb2bdb67e0ffcbdbd65724c84", 0x1000}, {&(0x7f00000014c0)="e246b5333445687fc789702baeab2830887d69a67216eed0eb2357a986a76f4479be1354bddd18e8d2ba652913391c5ac38a15be1f7f6e78d95072b65e2e6ad3a3db7ee09a9452be2fe38114acf4fb650d0ed1486268cf8d82e20b023f93a84b824c07e7aa76c67d603db131f3805533603ffec2fa3593dbe09f65f8bdb75d1d74133e8f04d24f69d7568e125f34b7e255976625515e333c5200ff2804044bcdaafc4cada31c9178d673fcf0", 0xac}, {&(0x7f00000000c0)}, {&(0x7f0000001580)="87d3296c05af60b78f57b94bd89a7a1725773e8291117a46a9845069bc81201ee55bcdf4a20e6531d8b38301a8fc759ddc6cfadc7d5ddcce5892b353c6c8451b376d31276ccf96ca25187096c61ee8b6af31cc3e56fe54bb242bdc8d9a2ce0fd61bd4e", 0x63}, {&(0x7f0000001600)="0a7521f6635f9bfe07320ad65e7dc9c651431351ae70de36221d0348127d922d9b72670ac9a2f1727d55422d106e30a220cc7b79d561ff2d8342294bb349f7d066fb278d8f0ecde50439817b5b717782d6a3c60240474e", 0x57}], 0x9, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001740)="fc0fcceae4969711df6c9f34b8e8eba5c6bda7bbddd8e2bd601c57107ce66401ef6f6cfe33023f79f2df4b3332e3451aadebc32167ba1b2d66a3613fcca86cebf07de7e99bffa9d4a1e34de14f5055325083ac6f48ffd8348e8743c9ba0638c16f2e405a356a1c29c62985e790df286464661be501f3e38c87f84be0c761e39766f8c73ff4e7cb013f94e1f897cfa2534b", 0x91}], 0x1, &(0x7f0000001800)=[@hopopts_2292={{0x1b0, 0x29, 0x36, {0xff, 0x33, '\x00', [@jumbo={0xc2, 0x4, 0x1839}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x1f, 0xbe, "9876bf9a1f1da703a3d8667fde208c3453c2711e2f9608e267662b56e7fa0b77a8466834b4ed253b0bc03d0d2ced079219ff4a980ee17439755e901cc9be5ad727d538b73f56626ddff491494262a62d4c4ca9af8cc8e8dda02de6dab52c4b6239e02400f15b9cf52bbfb32760c5f5387405ea47ab8599defcf2a4cea594e5718319f32f684d87c328ae9c0271c8fcb8ee03b410059d7a6d8a0bb59325cd28a1afda6af1320913a0a64817e22b35d1b57c6a26a51c4c48cc17489b0a700f"}, @generic={0x80, 0xc1, "2c4ed746c41c7a64648f1fe94cc08e89d3a5eefd59d9b90a63e93d645e355c64c6680b659c7e030bda00f47fc5136f89112d9566d83f62014506dec0884b51ec6ffc8c4d57d7257e1f711b77689694bb836f9db4e4dcbbefe4c6061637e775b13f4f998e98257dc5318f18dc2f539ca3d46dd7ff940c81a92cbef58ce4c5eedfd5f6c4552474d3337cce8b34d4b546886c443e725b0f93a6ba7efabd87e6afe6eb26b2ab7807519fb36c028315736fb0de223b2ee3c9819170b24967e9752ec8c2"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0xd8904d9fada0eefa, 0x0, 0x0, 0x7f}}}, @dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @hopopts={{0x20, 0x29, 0x36, {0x33, 0x1, '\x00', [@ra={0x5, 0x2, 0x633}, @ra={0x5, 0x2, 0x4}]}}}], 0x200}}], 0x2, 0x20000800) open(&(0x7f0000001b40)='./file0\x00', 0x4000, 0x91) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r3, r1, 0x0, 0x800100020016) 07:50:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000400000014000400"], 0x58}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0300"/18, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000002) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r3}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) io_setup(0xd20, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_pgetevents(r5, 0x9, 0x5, &(0x7f0000000440)=[{}, {}, {}, {}, {}], &(0x7f0000000180)={r6, r7+60000000}, &(0x7f0000000380)={&(0x7f0000000240)={[0x5]}, 0x8}) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r8 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r8}, &(0x7f0000000040)=0x0) timer_settime(r9, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x400c1, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000005c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7dff, 0x0, 0x9, 0x0, 0xfff}, r8, 0x9, 0xffffffffffffffff, 0x8) 07:50:45 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:45 executing program 3: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:45 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) [ 1338.533898][ T26] audit: type=1800 audit(1638517845.286:618): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15581 res=0 errno=0 [ 1338.622329][T13237] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1338.630790][ T26] audit: type=1800 audit(1638517845.286:619): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15581 res=0 errno=0 [ 1338.635897][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1338.699004][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1338.726635][ T26] audit: type=1804 audit(1638517845.386:620): pid=13236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir047438839/syzkaller.8uygSY/170/bus" dev="sda1" ino=15577 res=1 errno=0 07:50:45 executing program 3: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:45 executing program 3: pipe(&(0x7f0000000040)) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:45 executing program 3: pipe(&(0x7f0000000040)) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:45 executing program 3: pipe(&(0x7f0000000040)) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:47 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) r1 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r1, 0x9, 0xffffffffffffffff, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) 07:50:47 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:47 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1031fe, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r4, r2, 0x0, 0x800100020016) 07:50:47 executing program 2: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r4, 0xffffffffffffffff, 0x0, 0x800100020016) 07:50:47 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) fanotify_init(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) futex(&(0x7f0000000140), 0xc, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000240)=0x2, 0x2) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() ptrace(0x11, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x2, 0xff, 0x0, 0x0, 0xff, 0x848, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0x7, 0x7, 0x7, 0x5, 0x6ac, 0x7fff, 0x0, 0x9, 0x0, 0xfff}, r2, 0x9, 0xffffffffffffffff, 0x8) 07:50:47 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x40042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x14, @dev}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000000)={@private2, r6}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendfile(r7, r1, 0x0, 0x800100020016) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@bridge_delneigh={0x2c, 0x1d, 0x200, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x0, r6, 0x10, 0xb, 0x1}, [@NDA_VNI={0x8}, @NDA_DST_IPV4={0x8, 0x1, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 07:50:47 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1341.037001][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:47 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) [ 1341.147541][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:50:48 executing program 3: pipe(0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:48 executing program 3: pipe(0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:48 executing program 3: pipe(0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0) 07:50:48 executing program 3: pipe(&(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x140202, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0)