syzkaller login: [ 153.045870][ T40] audit: type=1400 audit(1596767526.100:41): avc: denied { map } for pid=9330 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:47433' (ECDSA) to the list of known hosts. [ 157.173411][ T40] audit: type=1400 audit(1596767530.230:42): avc: denied { map } for pid=9342 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/08/07 02:32:10 fuzzer started 2020/08/07 02:32:10 dialing manager at 10.0.2.10:35491 2020/08/07 02:32:11 syscalls: 3286 2020/08/07 02:32:11 code coverage: enabled 2020/08/07 02:32:11 comparison tracing: enabled 2020/08/07 02:32:11 extra coverage: enabled 2020/08/07 02:32:11 setuid sandbox: enabled 2020/08/07 02:32:11 namespace sandbox: enabled 2020/08/07 02:32:11 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/07 02:32:11 fault injection: enabled 2020/08/07 02:32:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/07 02:32:11 net packet injection: enabled 2020/08/07 02:32:11 net device setup: enabled 2020/08/07 02:32:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/07 02:32:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/07 02:32:11 USB emulation: enabled 2020/08/07 02:32:11 hci packet injection: enabled [ 158.055008][ T40] audit: type=1400 audit(1596767531.110:43): avc: denied { integrity } for pid=9360 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 02:33:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(r0, r1) 02:33:35 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)) [ 242.229243][ T40] audit: type=1400 audit(1596767615.270:44): avc: denied { map } for pid=9362 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=74 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 02:33:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:35 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000044c0)='/dev/null\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x5450, 0x0) [ 243.092880][ T9366] IPVS: ftp: loaded support on port[0] = 21 [ 243.093132][ T9364] IPVS: ftp: loaded support on port[0] = 21 [ 243.182151][ T9368] IPVS: ftp: loaded support on port[0] = 21 [ 243.467176][ T9369] IPVS: ftp: loaded support on port[0] = 21 [ 243.597986][ T9368] chnl_net:caif_netlink_parms(): no params data found [ 243.648240][ T9364] chnl_net:caif_netlink_parms(): no params data found [ 243.685104][ T9366] chnl_net:caif_netlink_parms(): no params data found [ 243.848186][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.865326][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.885221][ T9368] device bridge_slave_0 entered promiscuous mode [ 243.914987][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.931191][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.947740][ T9368] device bridge_slave_1 entered promiscuous mode [ 243.976966][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.993191][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.011436][ T9364] device bridge_slave_0 entered promiscuous mode [ 244.028155][ T9364] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.042913][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.058656][ T9364] device bridge_slave_1 entered promiscuous mode [ 244.082206][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.097955][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.113370][ T9366] device bridge_slave_0 entered promiscuous mode [ 244.139013][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.159005][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.176292][ T9366] device bridge_slave_1 entered promiscuous mode [ 244.204027][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.263035][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.292087][ T9364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.320161][ T9364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.372541][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.594945][ T9364] team0: Port device team_slave_0 added [ 244.612801][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.645309][ T9368] team0: Port device team_slave_0 added [ 244.668549][ T9368] team0: Port device team_slave_1 added [ 244.683888][ T9364] team0: Port device team_slave_1 added [ 244.763218][ T9369] chnl_net:caif_netlink_parms(): no params data found [ 244.804912][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.820905][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.884601][ T9364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.921948][ T9366] team0: Port device team_slave_0 added [ 244.952913][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.986735][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.088294][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.150131][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.176788][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.266081][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.301707][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.325318][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.413767][ T9364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.448504][ T9366] team0: Port device team_slave_1 added [ 245.625259][ T9368] device hsr_slave_0 entered promiscuous mode [ 245.712769][ T9368] device hsr_slave_1 entered promiscuous mode [ 245.864918][ T9364] device hsr_slave_0 entered promiscuous mode [ 245.961133][ T9364] device hsr_slave_1 entered promiscuous mode [ 246.031142][ T9364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.064235][ T9364] Cannot create hsr debugfs directory [ 246.084318][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.105280][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.171270][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.207572][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.225063][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.288305][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.345073][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.367973][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.394739][ T9369] device bridge_slave_0 entered promiscuous mode [ 246.442901][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.483903][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.515282][ T9369] device bridge_slave_1 entered promiscuous mode [ 246.594146][ T9366] device hsr_slave_0 entered promiscuous mode [ 246.661657][ T9366] device hsr_slave_1 entered promiscuous mode [ 246.730907][ T9366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.761062][ T9366] Cannot create hsr debugfs directory [ 246.824037][ T9369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.876024][ T9369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.946624][ T9369] team0: Port device team_slave_0 added [ 247.041712][ T9369] team0: Port device team_slave_1 added [ 247.227221][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.258845][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.334094][ T9369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.434808][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.459527][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.537692][ T9369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.617585][ T40] audit: type=1400 audit(1596767620.670:45): avc: denied { create } for pid=9368 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 247.622697][ T9368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.707089][ T40] audit: type=1400 audit(1596767620.670:46): avc: denied { write } for pid=9368 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 247.707120][ T40] audit: type=1400 audit(1596767620.670:47): avc: denied { read } for pid=9368 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 247.948173][ T9368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.058721][ T9368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.141438][ T9368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.318102][ T9369] device hsr_slave_0 entered promiscuous mode [ 248.381146][ T9369] device hsr_slave_1 entered promiscuous mode [ 248.440976][ T9369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.468209][ T9369] Cannot create hsr debugfs directory [ 248.547763][ T9364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.650157][ T9364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.769622][ T9364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.859568][ T9364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.064266][ T9366] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.164532][ T9366] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.248069][ T9366] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.344039][ T9366] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.519701][ T9369] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.658196][ T9369] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.775389][ T9369] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.897066][ T9369] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.085284][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.246179][ T9364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.314990][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.373257][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.459990][ T9368] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.546864][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.606224][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.659919][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.700949][ T9006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.735760][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.767867][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.791767][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.862689][ T9364] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.893249][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.931226][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.972567][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.011355][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.068755][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.117662][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.170277][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.207273][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.238568][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.282376][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.331243][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.376183][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.432325][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.499419][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.552429][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.602498][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.633043][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.654644][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.686056][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.715312][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.743635][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.781633][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.805165][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.841431][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.870294][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.909726][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.957164][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.005372][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.049465][ T9368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.113513][ T9366] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.134252][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.163526][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.185070][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.209791][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.234037][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.255738][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.321096][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.361700][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.383285][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.401558][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.425869][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.450208][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.479694][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.532894][ T9368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.561074][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.591267][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.624974][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.653213][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.681645][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.701627][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.723283][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.746552][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.777519][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.817814][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.865277][ T9369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.906672][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.948522][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.992875][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.049527][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.104238][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.155304][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.206254][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.256697][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.298772][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.347613][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.397633][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.443553][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.494409][ T9369] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.534214][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.560835][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.591482][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.623270][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.651760][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.675357][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.704368][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.748212][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.779251][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.811092][ T9364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.838115][ T9366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.887063][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.918886][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.947307][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.980164][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.023941][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.054901][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.090001][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.135193][ T9368] device veth0_vlan entered promiscuous mode [ 254.183759][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.214841][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.241404][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.268022][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.293331][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.333126][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.375539][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.416948][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.466260][ T9368] device veth1_vlan entered promiscuous mode [ 254.494508][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.534102][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.580869][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.608799][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.634103][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.663480][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.688076][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.712451][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.738112][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.764484][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.792333][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.819262][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.855695][ T9364] device veth0_vlan entered promiscuous mode [ 254.891872][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.922355][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.967945][ T9364] device veth1_vlan entered promiscuous mode [ 255.036683][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.077387][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.112973][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.152042][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.195595][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.237548][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.273435][ T9368] device veth0_macvtap entered promiscuous mode [ 255.303646][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.331640][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.366514][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.394565][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.426798][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.467271][ T9368] device veth1_macvtap entered promiscuous mode [ 255.502998][ T9364] device veth0_macvtap entered promiscuous mode [ 255.543242][ T9369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.569462][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.599781][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.625157][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.657903][ T9366] device veth0_vlan entered promiscuous mode [ 255.680747][ T9364] device veth1_macvtap entered promiscuous mode [ 255.717281][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.745018][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.778454][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.818543][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.853704][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.895917][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.975451][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.017521][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.066360][ T9366] device veth1_vlan entered promiscuous mode [ 256.102380][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 256.149260][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.203388][ T9364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.283828][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.336686][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.375603][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.426184][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 256.489257][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.575835][ T9364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.652804][ T9366] device veth0_macvtap entered promiscuous mode [ 256.904295][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.965819][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.028707][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.103150][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.167473][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.232822][ T9391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.315979][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.382920][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.454045][ T9366] device veth1_macvtap entered promiscuous mode [ 257.635179][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.684228][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.729964][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.761464][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.827351][ T9369] device veth0_vlan entered promiscuous mode [ 257.915711][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 257.962006][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.996334][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.022795][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.073696][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.121534][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.165729][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.259577][ T9369] device veth1_vlan entered promiscuous mode [ 258.295421][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.345970][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.398352][ T9366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.452484][ T9366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.493734][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.529671][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.569886][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.752935][ T40] audit: type=1400 audit(1596767631.810:48): avc: denied { associate } for pid=9368 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 259.057330][ T9368] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 259.058205][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.199472][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.334788][ T9369] device veth0_macvtap entered promiscuous mode [ 259.373730][ T9369] device veth1_macvtap entered promiscuous mode [ 259.523409][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.575729][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.672483][ T9369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.767589][ T9369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.883577][ T9369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 259.964539][ T9369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.076922][ T9369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 260.147365][ T9369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:33:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) [ 260.206450][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.247310][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 02:33:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) [ 260.288050][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 02:33:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) [ 260.347948][ T9369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 02:33:53 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)) [ 260.405735][ T9369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:33:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) [ 260.473186][ T9369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 02:33:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(r0, r1) 02:33:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) [ 260.538554][ T9369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.624207][ T9369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 260.683185][ T9369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.759074][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.797455][ T28] Bluetooth: hci0: command 0x0409 tx timeout [ 260.883390][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.912089][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.420685][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 262.149511][ T50] Bluetooth: hci2: command 0x0409 tx timeout 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 02:33:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(r0, r1) 02:33:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(r0, r1) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 02:33:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000300)="c9cbea7e10456c22ad"}) 02:33:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(r0, r1) 02:33:55 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 02:33:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 02:33:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 02:33:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:55 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x240901, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) [ 262.861388][ T3871] Bluetooth: hci0: command 0x041b tx timeout 02:33:56 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000044c0)='/dev/null\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5450, 0x0) 02:33:56 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 02:33:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:56 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@fat=@errors_remount='errors=remount-ro'}]}) 02:33:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 02:33:56 executing program 2: exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:56 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) [ 263.462641][ T9510] FAT-fs (loop1): bogus number of reserved sectors [ 263.500802][ T3871] Bluetooth: hci1: command 0x041b tx timeout 02:33:56 executing program 2: exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) [ 263.502435][ T9510] FAT-fs (loop1): Can't find a valid FAT filesystem 02:33:56 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 02:33:56 executing program 2: exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) [ 263.651343][ T9510] FAT-fs (loop1): bogus number of reserved sectors 02:33:56 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) [ 263.698776][ T9510] FAT-fs (loop1): Can't find a valid FAT filesystem 02:33:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) 02:33:56 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) 02:33:56 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0) 02:33:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) 02:33:56 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:56 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0) 02:33:57 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 02:33:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) 02:33:57 executing program 1: symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') symlinkat(&(0x7f0000000100)='./file2/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2/file0\x00') 02:33:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) [ 264.232555][ T35] Bluetooth: hci2: command 0x041b tx timeout 02:33:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 02:33:57 executing program 1: symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') symlinkat(&(0x7f0000000100)='./file2/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2/file0\x00') [ 264.265619][ T35] Bluetooth: hci3: command 0x0409 tx timeout 02:33:57 executing program 3: 02:33:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:33:57 executing program 1: 02:33:57 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8eb760d9d96d64409c4571880878add6390e41"}) 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x1) 02:33:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 02:33:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 02:33:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000044c0)='/dev/null\x00', 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x5450, 0x0) 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x1) 02:33:57 executing program 1: 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x1) 02:33:57 executing program 3: 02:33:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 02:33:57 executing program 1: 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 02:33:57 executing program 1: 02:33:57 executing program 3: 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 02:33:57 executing program 3: 02:33:57 executing program 1: 02:33:57 executing program 0: 02:33:57 executing program 0: 02:33:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 02:33:57 executing program 1: 02:33:57 executing program 3: 02:33:57 executing program 1: 02:33:57 executing program 0: 02:33:58 executing program 0: 02:33:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) [ 264.950881][ T18] Bluetooth: hci0: command 0x040f tx timeout 02:33:58 executing program 1: 02:33:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000002180)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x3c, 0x0, @local, @mcast2={0x0}}}, 0x76) 02:33:58 executing program 0: 02:33:58 executing program 1: 02:33:58 executing program 0: 02:33:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 02:33:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 02:33:58 executing program 1: 02:33:58 executing program 0: 02:33:58 executing program 1: 02:33:58 executing program 0: 02:33:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x0) 02:33:58 executing program 0: 02:33:58 executing program 0: 02:33:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000002180)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x3c, 0x0, @local, @mcast2={0x0}}}, 0x76) 02:33:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x0) 02:33:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000002180)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x3c, 0x0, @local, @mcast2={0x0}}}, 0x76) 02:33:58 executing program 0: 02:33:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x0) 02:33:58 executing program 0: [ 265.581632][ T18] Bluetooth: hci1: command 0x040f tx timeout 02:33:58 executing program 2: 02:33:58 executing program 0: 02:33:58 executing program 1: unshare(0x2000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 02:33:58 executing program 0: 02:33:58 executing program 2: 02:33:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000002180)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x44, 0x3c, 0x0, @local, @mcast2={0x0}}}, 0x76) 02:33:58 executing program 2: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3f, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 02:33:58 executing program 0: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xb9, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 02:33:58 executing program 1: unshare(0x2000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 02:33:59 executing program 3: unshare(0x2000400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 02:33:59 executing program 1: unshare(0x2000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 02:33:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) [ 266.115079][ T40] audit: type=1400 audit(1596767639.170:49): avc: denied { prog_load } for pid=9737 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 266.268809][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 266.342835][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 266.351049][ T9006] Bluetooth: hci2: command 0x040f tx timeout [ 266.386899][ T40] audit: type=1400 audit(1596767639.170:50): avc: denied { bpf } for pid=9737 comm="syz-executor.3" capability=39 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 266.430148][ T9006] Bluetooth: hci3: command 0x041b tx timeout [ 266.569017][ T40] audit: type=1400 audit(1596767639.180:51): avc: denied { perfmon } for pid=9737 comm="syz-executor.3" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 266.886986][ T35] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 267.221103][ T35] usb 5-1: config 1 has no interface number 1 [ 267.319676][ T35] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 267.417477][ T35] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.463892][ T13] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 267.500679][ T35] usb 5-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.566043][ T13] usb 7-1: config 1 has no interface number 1 [ 267.663011][ T35] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 267.673912][ T9006] Bluetooth: hci0: command 0x0419 tx timeout [ 267.676403][ T9006] Bluetooth: hci1: command 0x0419 tx timeout [ 267.721246][ T13] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 267.944914][ T35] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.961212][ T13] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.028783][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.093048][ T13] usb 7-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.135445][ T35] usb 5-1: Product: syz [ 268.135454][ T35] usb 5-1: Manufacturer: syz [ 268.135466][ T35] usb 5-1: SerialNumber: syz [ 268.219574][ T13] usb 7-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 268.447361][ T13] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.614917][ T9006] Bluetooth: hci2: command 0x0419 tx timeout [ 268.632862][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.703210][ T18] Bluetooth: hci3: command 0x040f tx timeout [ 268.731203][ T13] usb 7-1: Product: syz [ 268.731213][ T13] usb 7-1: Manufacturer: syz [ 268.731221][ T13] usb 7-1: SerialNumber: syz [ 269.278092][ T35] usb 5-1: can't set config #1, error -71 02:34:02 executing program 1: unshare(0x2000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 02:34:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x541d, 0x0) 02:34:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x1, &(0x7f0000000040)) [ 269.338621][ T40] audit: type=1400 audit(1596767642.390:52): avc: denied { prog_run } for pid=9737 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 269.413302][ T35] usb 5-1: USB disconnect, device number 2 [ 269.579822][ T13] usb 7-1: USB disconnect, device number 2 02:34:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) [ 270.399883][ T40] audit: type=1400 audit(1596767643.450:53): avc: denied { open } for pid=9749 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 271.027836][ T35] Bluetooth: hci3: command 0x0419 tx timeout [ 271.292190][ T40] audit: type=1400 audit(1596767643.830:54): avc: denied { kernel } for pid=9749 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 271.731647][ T40] audit: type=1400 audit(1596767643.870:55): avc: denied { confidentiality } for pid=9749 comm="syz-executor.2" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 02:34:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) 02:34:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x8000) 02:34:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) 02:34:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x541d, 0x0) 02:34:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x1, &(0x7f0000000040)) 02:34:05 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203030902470001010000000904000000020600000524060101"], 0x0) 02:34:05 executing program 0: 02:34:06 executing program 1: sched_getaffinity(0x0, 0x8, &(0x7f0000002dc0)) 02:34:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:06 executing program 2 (fault-call:4 fault-nth:0): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) [ 273.209093][ T9797] FAULT_INJECTION: forcing a failure. 02:34:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) [ 273.209093][ T9797] name failslab, interval 1, probability 0, space 0, times 1 [ 273.224675][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd 02:34:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) [ 273.319345][ T9797] CPU: 0 PID: 9797 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 273.393790][ T9797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 273.450919][ T9797] Call Trace: 02:34:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) [ 273.497278][ T9797] dump_stack+0x18f/0x20d [ 273.503829][ T9797] should_fail.cold+0x5/0x14 [ 273.503829][ T9797] should_failslab+0x5/0xf [ 273.580990][ T9797] kmem_cache_alloc_trace+0x240/0x2d0 [ 273.602295][ T9797] alloc_pipe_info+0x10a/0x590 [ 273.602295][ T9797] splice_direct_to_actor+0x779/0x980 [ 273.602295][ T9797] ? inode_security+0x102/0x130 [ 273.602295][ T9797] ? avc_policy_seqno+0x9/0x70 [ 273.602295][ T9797] ? generic_splice_sendpage+0x140/0x140 [ 273.602295][ T9797] ? do_splice_to+0x170/0x170 [ 273.602295][ T9797] do_splice_direct+0x1b3/0x280 [ 273.602295][ T9797] ? splice_direct_to_actor+0x980/0x980 [ 273.602295][ T9797] ? __sb_start_write+0x1d5/0x470 [ 273.602295][ T9797] do_sendfile+0x559/0xc30 [ 273.602295][ T9797] ? do_compat_pwritev64+0x1b0/0x1b0 [ 273.602295][ T9797] __x64_sys_sendfile64+0x1cc/0x210 [ 273.602295][ T9797] ? __ia32_sys_sendfile+0x220/0x220 [ 273.602295][ T9797] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 273.602295][ T9797] ? trace_hardirqs_on+0x5f/0x220 [ 273.602295][ T9797] ? lockdep_hardirqs_on+0x76/0xf0 [ 273.602295][ T9797] do_syscall_64+0x2d/0x70 [ 273.602295][ T9797] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 273.602295][ T9797] RIP: 0033:0x45cad9 [ 273.602295][ T9797] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.602295][ T9797] RSP: 002b:00007f8678fe2c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.221527][ T9797] RAX: ffffffffffffffda RBX: 0000000000715c80 RCX: 000000000045cad9 [ 274.221527][ T9797] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 274.221527][ T9797] RBP: 00007f8678fe2cb0 R08: 0000000000000000 R09: 0000000000000000 [ 274.221527][ T9797] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000074bf00 [ 274.221527][ T9797] R13: 00007ffc4f28364f R14: 00007f8678fc3000 R15: 0000000000000003 [ 274.629335][ T0] NOHZ: local_softirq_pending 08 [ 274.749767][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 274.932861][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.071468][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.221884][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.440985][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.473299][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.508861][ T35] usb 8-1: Product: syz [ 275.530269][ T35] usb 8-1: Manufacturer: syz [ 275.552041][ T35] usb 8-1: SerialNumber: syz [ 275.631165][ T35] usb 8-1: bad CDC descriptors [ 275.835442][ T1230] usb 8-1: USB disconnect, device number 2 [ 275.904146][ T0] NOHZ: local_softirq_pending 08 [ 276.660841][ T3211] usb 8-1: new high-speed USB device number 3 using dummy_hcd 02:34:09 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902470001010000000904000000020600000524"], 0x0) 02:34:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:34:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) 02:34:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 02:34:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x2) 02:34:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) [ 277.381095][ T3211] usb 8-1: device not accepting address 3, error -71 [ 277.781412][ T3211] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 278.061410][ T3211] usb 8-1: Using ep0 maxpacket: 16 [ 278.220904][ T3211] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.420954][ T3211] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.450910][ T3211] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.485102][ T3211] usb 8-1: Product: syz [ 278.505991][ T3211] usb 8-1: Manufacturer: syz [ 278.548474][ T3211] usb 8-1: SerialNumber: syz [ 278.612938][ T3211] usb 8-1: bad CDC descriptors [ 278.825648][ T3211] usb 8-1: USB disconnect, device number 4 [ 279.610882][ T9390] usb 8-1: new high-speed USB device number 5 using dummy_hcd 02:34:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/198) [ 279.910958][ T9390] usb 8-1: Using ep0 maxpacket: 16 02:34:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 02:34:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x3) 02:34:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 02:34:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x4) [ 280.032217][ T9390] usb 8-1: device descriptor read/all, error -71 02:34:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 02:34:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x8) 02:34:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 02:34:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCPKT(r0, 0x5441, 0x0) 02:34:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x10) 02:34:14 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:14 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x300) 02:34:14 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0xffd) 02:34:14 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x7ffff000) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0xffffff1f) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:15 executing program 1: ioctl$TIOCPKT(0xffffffffffffffff, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0xffff88805ad77001) 02:34:15 executing program 1: ioctl$TIOCPKT(0xffffffffffffffff, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 1: ioctl$TIOCPKT(0xffffffffffffffff, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:15 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') fcntl$getown(r0, 0x9) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000015c0), &(0x7f0000001600)=0x4) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='cmdline\x00') sendfile(r0, r3, 0x0, 0x1) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001580)) preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000100)=""/169, 0xa9}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000001640)=""/69, 0x45}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/124, 0x7c}, {&(0x7f0000001440)=""/19, 0x13}, {&(0x7f0000001480)=""/47, 0x2f}], 0xa, 0x7fff, 0x2) 02:34:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:15 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/ptype\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x1) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x540d, &(0x7f0000000080)) 02:34:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(0x0) dup2(r0, 0xffffffffffffffff) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540d, 0x0) 02:34:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:16 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:16 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) r1 = ioctl$TIOCGPTPEER(r0, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 02:34:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xa4, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xec7c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x100}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x40}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'nr0\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4000044) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x6, 0x1, {0x0}, {r3}, 0xa9, 0x1}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r5, 0xff, 0x1, 0x0, 0x0) r6 = signalfd(r1, &(0x7f0000000240)={[0x1]}, 0x8) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r7, 0xff, 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000280)={r6, r7, 0xeb}) 02:34:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x80047456, &(0x7f0000000080)) 02:34:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) 02:34:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/rt_acct\x00') sendfile(r0, r4, 0x0, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r5, 0x1000000000000003, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)={r5, r6}) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) 02:34:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r2, r3, 0x0, 0x1) 02:34:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 02:34:17 executing program 2: clone(0x2000200cf7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 02:34:17 executing program 1: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) 02:34:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) 02:34:17 executing program 1: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 02:34:17 executing program 1: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 02:34:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, 0x0) 02:34:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1050c2, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r5 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r4, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r6, 0x0, 0x1) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) 02:34:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) [ 284.751996][ T40] audit: type=1400 audit(1596767657.800:56): avc: denied { write } for pid=10199 comm="syz-executor.2" name="net" dev="proc" ino=43947 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 02:34:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) dup2(r0, r1) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20400003) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) 02:34:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x2c, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 284.868481][ T40] audit: type=1400 audit(1596767657.810:57): avc: denied { add_name } for pid=10199 comm="syz-executor.2" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 284.944701][ T40] audit: type=1400 audit(1596767657.810:58): avc: denied { create } for pid=10199 comm="syz-executor.2" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 02:34:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, 0x0) 02:34:18 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)) 02:34:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCPKT(r2, 0x5417, 0x0) 02:34:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047456, 0x0) 02:34:18 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)) 02:34:19 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)) 02:34:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 02:34:19 executing program 3: unshare(0x2000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 02:34:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 02:34:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) 02:34:19 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) [ 286.191831][ T40] audit: type=1400 audit(1596767659.250:59): avc: denied { create } for pid=10254 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:34:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xc3, 0x81, 0xd8, 0x20, 0x19d2, 0x1008, 0x99c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xb3, 0xef, 0x31, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff}}, {{0x9, 0x5, 0x0, 0x1, 0x40}}, {{0x9, 0x5, 0x0, 0x2, 0x400}}]}}]}}]}}, 0x0) 02:34:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:19 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fff) [ 286.312630][ T40] audit: type=1400 audit(1596767659.360:60): avc: denied { bind } for pid=10254 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:34:19 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fff) [ 286.600796][ T9389] usb 6-1: new high-speed USB device number 2 using dummy_hcd 02:34:19 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:19 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) [ 286.930997][ T9389] usb 6-1: Using ep0 maxpacket: 32 [ 287.101133][ T9389] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 287.190852][ T9389] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 287.290694][ T9389] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 287.541446][ T9389] usb 6-1: New USB device found, idVendor=19d2, idProduct=1008, bcdDevice=99.c3 [ 287.601690][ T9389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.657314][ T9389] usb 6-1: Product: syz [ 287.686128][ T9389] usb 6-1: Manufacturer: syz [ 287.715787][ T9389] usb 6-1: SerialNumber: syz [ 287.752968][ T9389] usb 6-1: config 0 descriptor?? [ 287.802918][T10267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 288.057291][ T1230] usb 6-1: USB disconnect, device number 2 02:34:21 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='clear_refs\x00') r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x20) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = getpgid(r2) r4 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r5, 0xff, 0x1, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_driver={0x80, 0x7fffffff, &(0x7f0000000240)="92b7fb8a98f0eb174e6e8a63224d25b26d69c8d32a3ba5c2969389de24c4fdef562b2fd71725241470cc3c0f158166e76f91bd2c1048000ee7ecc6e964f969d974bf7aad27cf5a9f82bbc1e77b7961c11f69a7d4ba33061255e2b429e0f57e22c55a58fa2ba4614170b325f0a878990a5e7e"}) kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r4, &(0x7f0000000200)={r1, r5, 0xffff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r6, 0x0, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000000300)=""/98) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x8877, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="9d9d56cfc8a741ff42f4c10abd8f52fb9233183c2f7faf8d13108034719048bee3b870a46cd82e2b17e1fae637bd", 0x2e, 0x24d90a13}], 0xc0, &(0x7f0000000180)='(\x00') 02:34:21 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0) 02:34:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xedbe) 02:34:21 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) 02:34:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000180)={{{0x1}}, 0xf4, 0x9, &(0x7f0000000080)="ead9c62db617f545fb41b22b38acf16e16ae0c6c3a1127bcc748c462149cfd5cbe3e8f3491097891b9ac01b6c4256998730f445122988ae40d1a4148c3921ecbeb005b67a6836009ae68356a953bb7392837b2998e164a8e4fea7fb31f87273252787470a4179a470f5070fd9c892800b1cc25fe745ec0fe9da836ccfe796f6662a68c259fd65885a515ee1cdfe02808ddfbc65d3331f26ba99facfa39f049cb54df2f13d734d2dfa1ff51a9183cf90a15dce37bd67a007f2f5603ef6d1deb6c5b576790845c5f3dad1284e58618d49b567725a9632242b23dd4b717c5290e9ea9a388575917cf655eeaaa078b79cf8102fe4a23"}) sendfile(r0, r1, 0x0, 0x1) 02:34:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xedbe) 02:34:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r0, &(0x7f0000000280)=""/29, 0x1d) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="1ebb1c048f4195192288ac56e6929f6285cb3012bd1d68b90db3b2172a", 0x1d, r0) r2 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r2, &(0x7f0000000280)=""/29, 0x1d) keyctl$instantiate(0xc, r1, &(0x7f0000000140)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '}-', 0x20, 0x3f8b}, 0x2a, r2) exit_group(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r3, r4, 0x0, 0x1) [ 290.331661][T10305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 02:34:23 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) [ 290.524820][T10309] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 02:34:23 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0) 02:34:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) sendfile(r1, r0, 0x0, 0xedbe) 02:34:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) 02:34:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:24 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0) 02:34:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x1000000000000003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r4}, 0xc) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r7}, 0xc) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x9, @loopback, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="bde9d5d33bc4f4d9", 0x8}, {&(0x7f0000000200)="3d74fea668901fdddc8c2686a9fb480ee40a064548b68425432cb695bf72368807b9aeaa7dc74b3e4787e6565c591a3e36b73293effa85382ca245b1cba10877b0c5da54176558f3ef07354223dd2fcb", 0x50}, {&(0x7f0000000280)="5bd85dfeea96b87f1b44d3db311ff184f5fc24c9ea4bf8ee6a6550deb179257872cc0ec53098818c3df79676861b4405138acf80fa16", 0x36}], 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="180000000000000084000000060009000000000000000000300000000000000084000000010000007f00020001020000a1000000010000000101000002000000b8000000cd4ffccb75aefb991fb5bb4d2d5eb1b79c61688bbf8dd2143c0dd7e6c1725d251778154c5e64d60983805b20de8f50a2361bfd303ac5022c805b643cd805676b94608da981a2ff942dd3dd55876945437abf342982fbc938cdeeb969b60e8c8a44", @ANYRES32=r7], 0x68}, 0x404c0c1) 02:34:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:24 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) [ 291.992295][T10372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 02:34:25 executing program 2: clone(0x2000208cffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x2010001) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r2, 0xff, 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x9, 0xff, 0x2, 0x8}]}) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000000c0)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000100)={'geneve1\x00', 0x1}) 02:34:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) sendfile(r0, r1, 0x0, 0x1) 02:34:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:25 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0) 02:34:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0xedbe) 02:34:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1411, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r2, 0x0, 0x1) 02:34:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0xedbe) [ 292.355315][T10412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 02:34:26 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0) 02:34:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0xedbe) 02:34:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedbe) [ 293.168463][T10434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 02:34:26 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/vlan/vlan1\x00') sendfile(r0, r2, 0x0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000080)) 02:34:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedbe) 02:34:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:26 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) [ 293.733635][T10451] ptrace attach of "/syz-executor.2"[10446] was attempted by "/syz-executor.2"[10451] 02:34:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedbe) 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:27 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) [ 294.088662][T10459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000200)={0x9, "18f1613a354b97318881f4bc858338535cc592a4551e83bfb19e7736beabc61d256f4337d00f0c43e4716e2cbd2576cabedecb075f8f721ab93147ec816b1105"}) lseek(r2, 0x1000000000000005, 0x0) write$snddsp(r2, &(0x7f0000000100)="d776f43eaf932c04267c853f4c1b865fa743c09d7db9d4f101c3b29c277db62c7956a3d2c36fbee98121bc2c53c64639a68ff83ea26822f70b65637ed0d558dfab908cda1de5eb10e3ad4f4ed63c486e7cb9f6288531bb8bdfa6201168d448764df7863b478d5ea8aa6a1946b09f34910b9755c1c4e80f9ae91037092e3dbe19ff0375cf415ca79a7f74d2b605e6c3470679f6eb20dda44e9134196733fe1672d9949f14668a855a6ebdde58f55793b36154d2587d5b804f737a35a0de0db83483bf2dc2967c6f288e175415e27ecdb45f8cfb64ade0e5f93aea363e1d580bcc703fe6c87ac01795983337", 0xeb) lseek(r1, 0x1000000000000003, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='net/packet\x00') sendfile(r0, r5, 0x0, 0x1) 02:34:27 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:27 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:27 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:27 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x4, 0xcf, [], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/207}, &(0x7f0000000280)=0x78) sendfile(r0, r1, 0x0, 0x1) 02:34:27 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:27 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:27 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:27 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x9, 0xffffffffffffffff}, 0x8) lseek(r0, 0x1000000000000003, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='schedstat\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r2, r3, 0x0, 0x1) 02:34:27 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:27 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:27 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:27 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:27 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x8003) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/nf_conntrack_expect\x00') sendfile(r0, r2, 0x0, 0x1) 02:34:27 executing program 1: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:27 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 1: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 1: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x6d0c16cd832f9e9f, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) 02:34:28 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:34:28 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540), 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540), 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540), 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom\x00', 0x440803, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x7a2b18e1ed5fab31, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000001c0)={0x8, 0x40, 0x6, 0x100}) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='limits\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r3, 0x1000000000000003, 0x0) read$sndhw(r3, &(0x7f00000000c0)=""/123, 0x7b) sendfile(r1, r2, 0x0, 0x1) 02:34:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x1000000000000003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='oom_score_adj\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r4, 0x1000000000000003, 0x0) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000100)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101, 0x0) sendfile(r3, r5, 0x0, 0x1) 02:34:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x1405, 0x400, 0x70bd28, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) 02:34:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) 02:34:28 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:28 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) 02:34:28 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:29 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) 02:34:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:29 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x1000000000000003, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)={0xa4, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000240)=0x6) read$snddsp(r3, &(0x7f00000000c0)=""/195, 0xc3) sendfile(r1, r2, 0x0, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r4, 0x1000000000000003, 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000200)) 02:34:29 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:29 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xedbe) 02:34:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETFILTEREBPF(r0, 0x401054d5, 0x0) 02:34:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xedbe) 02:34:29 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xedbe) 02:34:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r4, 0x1000000000000003, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f00000001c0)={0x746, 0x4, 0x8}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r5, 0xff, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) listen(r3, 0x98) accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x10001, @local, 0x5}}, 0x0, 0x0, 0x3, 0x0, "6e45503a85fcba8f5a4a3ee427041c1e3bbd69e144a19abf53a5fb32970d8d9f2ba7d08d9053f6b20e9c33d69ba282ed3b764b6ca8acc8041d3ae84eacad6ec3ccecb3ae5137f2b1608e86b7ba7107b1"}, 0xd8) sendfile(r0, r1, 0x0, 0x1) 02:34:29 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:29 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:30 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rfcomm\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:34:30 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETFILTEREBPF(r0, 0x401054d5, 0x0) 02:34:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:30 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) accept4(r1, 0x0, &(0x7f0000000080), 0x80000) 02:34:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:30 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) 02:34:31 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:31 executing program 2: clone(0x84000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x9d1c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) pidfd_send_signal(r1, 0x3f, &(0x7f0000000080)={0x17, 0x7, 0x6}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40240, 0x0) 02:34:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x130, 0x88020000, 0x34a, 0x130, 0x450, 0x220, 0x220, 0x450, 0x220, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x320, 0x340, 0x0, {}, [@common=@unspec=@comment={{0x120, 'comment\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond0\x00', {0x800, 0x0, 0x5a, 0x0, 0x0, 0x81, 0x40, 0x6}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 02:34:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff}, 0x14) sendfile(r1, r0, 0x0, 0xedbe) [ 298.399758][T10804] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 02:34:31 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) [ 298.478564][T10804] xt_CT: You must specify a L4 protocol and not use inversions on it 02:34:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 02:34:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0xedbe) 02:34:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0xedbe) [ 298.658907][T10822] xt_CT: You must specify a L4 protocol and not use inversions on it 02:34:31 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0xedbe) 02:34:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedbe) 02:34:32 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedbe) 02:34:32 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x130, 0x88020000, 0x34a, 0x130, 0x450, 0x220, 0x220, 0x450, 0x220, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x320, 0x340, 0x0, {}, [@common=@unspec=@comment={{0x120, 'comment\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond0\x00', {0x800, 0x0, 0x5a, 0x0, 0x0, 0x81, 0x40, 0x6}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 02:34:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r1, &(0x7f0000000280)=""/29, 0x1d) r2 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r2, &(0x7f0000000280)=""/29, 0x1d) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000180)=[{&(0x7f0000000280)="07100c184794e7f117d9581f7acedda9ca3ccfd84064f4bc5f2fbafd69d14cbe98be7b487c039c0d0333f631be38b1a47fa422317689a30b1bbd797385ca7f3fdba98a4ee98501ce030e8f3e286730d4be652a13e349e0bd7e975b322935ab271ab4c9b8aa47cff95dbd8469953ef596b18f9e1752c29cea20c66ec187dbb29954f865e0fd94fcfbdb7e432e4b3e9050c641128f15582a4e8718496a3ec9092f3259bad7028a76ea8bb4b7c6b45d2dcfcfc7ac8f49c1f806489ebb95b4249853b159742b96bfddbacad21eef86f9b8703fe8b37b6d29c792da9ad215f9155863e1bbddf8f7dd7600758c72d21f16a435db0854f3", 0xf4}], 0x1, r2) lseek(r0, 0x1000000000000003, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4, 0x5}}, @TCA_STAB={0x24}]}, 0xa8}}, 0x0) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r4, 0x2, {0x1, 0xff}, 0xfd}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r6, r7, 0x0, 0x1) 02:34:32 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedbe) 02:34:32 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) [ 299.226140][T10847] xt_CT: You must specify a L4 protocol and not use inversions on it 02:34:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0x0) 02:34:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) [ 299.325996][T10856] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 02:34:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0x0) 02:34:32 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:32 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) [ 299.609634][T10849] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 02:34:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) sendfile(r1, r0, 0x0, 0x0) 02:34:32 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:32 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x4) lseek(r2, 0x1000000000000003, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x400000000, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x2}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) 02:34:33 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(0x0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="2400000026000102"], 0x24}}, 0x0) 02:34:33 executing program 2: clone(0x8201000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') sendfile(r0, r1, 0x0, 0x1) 02:34:33 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 02:34:33 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(0x0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:34:33 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(0x0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:33 executing program 1: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000027000)={0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) 02:34:33 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 02:34:33 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000001300)={{0x0, @dev={0xac, 0x14, 0x14, 0x12}, 0x4e24, 0x3, 'wlc\x00', 0x14, 0x7f, 0x4b}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e20, 0x4, 0x3, 0x40, 0xd28}}, 0x44) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x8001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000012c0)={0xf07, 0x4745504a, 0x9, 0x5, 0x2, @discrete={0x5, 0x2}}) lseek(r3, 0x1000000000000003, 0x0) r4 = clone3(&(0x7f0000001240)={0x2000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x6}, &(0x7f0000000140)=""/174, 0xae, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, r1, r2], 0x3, {r3}}, 0x58) r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/unix\x00') sendfile(r0, r5, 0x0, 0x1) 02:34:33 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5450, 0x0) 02:34:33 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:33 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 02:34:34 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 02:34:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 02:34:34 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000007, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r4, 0x1000000000000003, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r5, 0x1000000000000003, 0x0) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8}, 0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000180)={r8, 0xed60, 0x7, 0x100, 0x1, 0xb1}, 0x14) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x283, 0x2, 0x4, 0x70000, 0x8, {r2, r3/1000+60000}, {0x4, 0x2, 0x9, 0x3, 0x40, 0x81, "9934dcd5"}, 0x5, 0x2, @fd, 0x7, 0x0, r4}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r9, 0x0, 0x1) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ndctl0\x00', 0x800, 0x0) 02:34:34 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 02:34:34 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 02:34:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5450, 0x0) 02:34:34 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 02:34:34 executing program 2: clone(0x20006304ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x1) 02:34:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 02:34:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x1002) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x5a5, 0xffffffff, [], &(0x7f00000000c0)=0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r2, 0x0, 0x1) [ 301.500128][ T40] audit: type=1804 audit(1596767674.540:61): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir247330524/syzkaller.tck6Pp/151/file0/bus" dev="ramfs" ino=47571 res=1 02:34:34 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x400000000, 0x0, 0x2}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4048081) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001b80)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xfffffef1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000080)={0x2, 0x0, @private}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000340)}, {&(0x7f00000023c0)="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", 0xefc}, {&(0x7f00000003c0)="bd94602c6e36879059b0e1f5d7c3e32e935c3ee0ffffffffffffff4f5f65e55c9dc43db6d59efe27c56c3b4909f672b522eb2734eacfd6b8efe499ad77cad6", 0x3f}, {&(0x7f0000000440)="3c8dcb38aaf1087fab5eb871718e3e569870", 0x12}, {&(0x7f0000000480)="dc98e4599506bde03a4bc39e2a4045729900a40fc63f55fb87a75a6e18319f06939ac59e91723a4c6d351ff1acfbf1a9e04a4eef793c723db6", 0x39}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX=r2, @ANYBLOB="ffffffffac1414bb000000007a000000000000000000000007000000440c1773000000000000003f44447aa1e0000002000000050000000000000006ac1e010100008000ffffffff000000076401010200000008ac1414bbfffff35dac1414bb0000007aac1414aa00000100890f4f00000000640101007f000001a307f90a0101010000"], 0xd0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000540)="37de54e9c877da3b9697", 0xa}, {&(0x7f0000000580)}, {&(0x7f00000007c0)="742fa0629a5004b02e2339cee92c0ea4b24a699a75b0ee34acabe90228aafa6816c3d6f9fadbafc18be75044cba513c6bb0eeaaf67f46324ffe266f0281bd29492a8e42ea775a5f6dc5c372858042e3713e4f3fb477d", 0x56}, {&(0x7f0000000840)="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", 0xfb}, {&(0x7f00000033c0)="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", 0xff5}, {&(0x7f0000000940)="ec896ba3324238c80e76e250e5d160d78729c7cb07a6f77c10d3bdf1c8050467f6d5a492955d8234775a7877d20602445952ca83e958e93e6d69f031bf417e7367f95ea419d51aa66dc5fe36e90585b67f19550055cde73b7fd39e27e45f207435120c7f542d49a036a278574ac0ca057a995d73725927f85930f31327cba2c03ac81293301c57abab284edac20466ec305fa9a8124118b4a74422c8457405233300b474a1859f52babfd6a5", 0xac}, {&(0x7f0000001340)="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", 0x137}], 0x7, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000740)="6956deeb486b9b67b3d82c0b89cb20833fe9590b8cd5adc5bbd2e6fadf04456cf794c3d56d0c7173", 0x28}, {&(0x7f0000000c00)="24d15cd0178812732c3b2fa1e6", 0xd}, {&(0x7f0000000c40)="a627a735a227162146ec839368aa645e794b041aa67e5763ad7a", 0x1a}, {&(0x7f00000043c0)="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", 0xffe}], 0x4, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff9}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000d00)="d831002b40cc3446d6593d8f3c7920e3b821b0c6e9d5c8fe5d9ab26b32199580efee8173870fa4ff26b6d2808c70b51783a7b68382913e7ec669a2ec674d6df062ce27c7064cafca65303538089d23371490182cc3fbd24a3376e6304d4b03c629c0a392e8f9c13251d24090f8fd0fc6f20d564acd8e43269460710d14de595cdfa03615d0df0628b0f4af34ddb2c998c18eccb1a35e872678f15d5430d34b494c9d3c7a4827ead98ae3f5ba8115924e9b241962845adf255fedfed54482813b3bcb235a7ae81195adb45e6294dfff97393597cf27b96b47419b7537dcc8bf6b", 0xe0}, {&(0x7f0000000e00)="360f4ff81563ae1cddd8f60a3d643e7ac87e625b73a565cb405b2d67628d461c8225104c17c3149b97a7087b63fb2e4b8657c92ac88a06ecc285677c6f57b1aa103f6e8f2a12d181e639df5f26f4fb00bfe7926dd19b7b5ae839152fd8e478b958ff1bef4d961005b02931ea49b457affe2a967656ae4e4ad648f24b00c35670831c8697e6ab1eb51bb2ed6d4bd07df28203ee9aec83ec559d9da96b5e5d89688f0de66388d2b58052128faaea39e93462", 0xb1}, {&(0x7f00000053c0)="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", 0xffe}, {&(0x7f0000000ec0)="b2cbdfc5a4712077af9d1633d307a2ef8856767238710891ae1cf7cdb61cd95166ffa32462aad5ddd01f00c0c9b6b002dfaec4da6af932cf92737b126be238454bdf6ac0a0c3c2a877aa214415b2df5c5ac7fa925bd6e6fb1eabb451a8218ccd056b4c", 0x63}, {&(0x7f0000000f40)="1042ec02183a74b1fc3cbb00f60ec77280598a3acb11147d230ce9ff81a24866df0167c99394659099eea4059826cdb6609f8cdfb4926278bcd0acdb6a241b93513ebc1bc887d63c8cc491d4fa598fcefcb6ed08cd4b1de6d0778d", 0x5b}, {&(0x7f00000063c0)="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", 0xe00}, {&(0x7f0000000640)="51920684f4447a795430754e6be26ff6914f1880626ed54837eb1d2d1b2e77d84e26f3ffd651a77d0c52d9bc9946cc3fb55a0ab24ecf20bf76a9802ce0ed37e9f66cfb23e5fb925ca78437d8a9ce67d727db768db03fda66441d8876d0016a3608c59bc7b53d616d4f01b7501f7b603825bcd66de711e11a68333877a2539a02", 0x80}, {0x0}], 0x8}}, {{&(0x7f0000001200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001240)="75e7c7842d29f237890ccf222d91f0f17689", 0x12}, {0x0}, {&(0x7f00000015c0)="2868d9ad5208e6221fcd8c780d3ce35363021cc7c4093383d0643077a946feba540daff2ad5d36d8bfc009d89b368027920b69c0b00889b156", 0x39}, {0x0}], 0x4}}], 0x5, 0x8015) 02:34:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) [ 301.855693][ T40] audit: type=1804 audit(1596767674.910:62): pid=10997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir247330524/syzkaller.tck6Pp/152/file0/bus" dev="ramfs" ino=45583 res=1 02:34:35 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7fff) 02:34:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') clock_settime(0x0, &(0x7f0000000080)={0x77359400}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f00000001c0)=0x3ff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000000000000000030000000d522b71f19c3537375035041fbb30d12c02baf7c8c123b4e9dcec95e850071a6aa8b0dc357424c6b4d66f8acbd205246360aea06c42f33ca0bcd94c850beb2f292ae72c2fdf5c8837669f7d6a89"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) [ 302.309750][ T40] audit: type=1804 audit(1596767675.360:63): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir247330524/syzkaller.tck6Pp/153/file0/bus" dev="ramfs" ino=46678 res=1 02:34:35 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fff) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fff) 03:33:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='clear_refs\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0xad25d127c3db9581, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000140)=""/227, &(0x7f0000000240)=0xe3) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x0, 0x100}) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x64, 0x0, 0xc3, "8fad1deae06f4fc97247892ab1928833", "9a2537af7955c6d64b07d6f2b2091a80b219a302eff2cb9bfff868dc88c4b54b6caf5ca614dfbaf97cf87619b7ceec71631b34bb1f9a118c9ba872c22669b1a4a718fa03f18f53e5ae8b89cff981d5"}, 0x64, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)) 03:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:20 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fff) 03:33:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fff) 03:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x1000000000000003, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r2, 0x0, 0x1) 03:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fff) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fff) 03:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') lseek(0xffffffffffffffff, 0x1000000000000003, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000b40)={0x0, 0x3, 0x80, 0x84b60dc0e875cdf6, 0x5}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r2, 0x0, 0x1) 03:33:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x0) 03:33:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x3, 0x20493859, 0x2, 0xc344, 0x3, @discrete={0x0, 0xffff}}) sendfile(r0, r1, 0x0, 0x1) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x0) 03:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:20 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:20 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x0) 03:33:21 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:21 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000080)) 03:33:21 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) 03:33:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:21 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) 03:33:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) 03:33:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e20, @multicast2}}) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r5, 0x400, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r5, @in={{0x2, 0x4e24, @multicast1}}, 0xe62, 0x7fff, 0x8, 0x9, 0x20, 0x5, 0x4}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r6, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x1, 0x7ff}, 0x90) ptrace$cont(0x7, r2, 0x0, 0x0) r7 = syz_open_procfs(r2, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r7, 0x0, 0x1) 03:33:21 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) 03:33:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) 03:33:21 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) 03:33:22 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) 03:33:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, 0x0) 03:33:22 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) 03:33:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x6, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) 03:33:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, 0x0) 03:33:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x6, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) 03:33:22 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r0, &(0x7f0000000280)=""/29, 0x1d) r1 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r1, &(0x7f0000000280)=""/29, 0x1d) keyctl$reject(0x13, r0, 0x3, 0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r2, r3, 0x0, 0x1) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2c0084007b26a28ce52e58f6b3b9b7d15f41fb3c68d189d9e67ef0e53fbddd7a22f4e69b06fffd1703f483415f2d3887e27be5c80f4a6357183c82f7ac0a275d098888d7b118b1ca3b75a64702d79f7d0f83b8467628594e3ab3b006044125ab64c06c783a82c61f844be64316350787104e312a8b9c83a74135664ae579ed9740e33afb35e52b25c84cc680e027dee46edecebad42519b362af623a34da09eeec51141230f70f9aa770aa112cb2bc4009bf8de1764803a4d8b8260eb95654", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf2503000000050001000000000008000500e00000020500010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4040800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r5, 0x1000000000000003, 0x0) pwritev(r3, &(0x7f0000002440)=[{&(0x7f00000002c0)="572b8268ab23be8f287657cd39d79b09f37cdad10442be6b7365bdffaff0989bf086b543547242081ff523b5605549845805d71afccb222fb89955d8ccf26fe8ef8f241b0d5262143b1badb1fb7a3e13ece9d4ad907161eb4735381a248072f3ca78f8b827fdb835e9fa26c26108e9e929a23d327c0d8f5cc905bbef5ce2d97d", 0x80}, {&(0x7f0000000240)="3af89a673ee39b2289ed64a7ed531c7e2d0ae7b9b563cd6997f746b077d628df182b5460d354b87eabc1", 0x2a}, {&(0x7f0000000340)="e96be9ed262b65df84e3ed43bebfcd39e1d84820294c458ac12da64f3dfc0e6606f909eba96d9e80208a867f9ca36720a61758fbefc57b016711311706e943f70a38c9cc25", 0x45}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="6b38c738fc6ba5baf6cabd647b2636ad968789cb4a6e9a8d3c714b", 0x1b}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="cac5705617eee00327b6", 0xa}], 0x7, 0x3, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSBRK(r6, 0x5409, 0x40000100) 03:33:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x6, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) 03:33:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) 03:33:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, 0x0) 03:33:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) 03:33:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1410, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x22000880) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r2, 0x0, 0x1) 03:33:23 executing program 1: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) read(0xffffffffffffffff, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:23 executing program 3: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x5, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 03:33:23 executing program 2: clone(0x20002144ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 03:33:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) 03:33:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) 03:33:23 executing program 1: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) read(0xffffffffffffffff, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:23 executing program 1: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) read(0xffffffffffffffff, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) [ 306.444442][ T9390] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 306.933960][ T9390] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.992479][ T9390] usb 8-1: config 1 has no interface number 1 [ 307.035971][ T9390] usb 8-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 307.097100][ T9390] usb 8-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.184257][ T9390] usb 8-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 307.241550][ T9390] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.321350][ T9390] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.543486][ T9390] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.612209][ T9390] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.669680][ T9390] usb 8-1: Product: syz [ 307.701485][ T9390] usb 8-1: Manufacturer: syz [ 307.733214][ T9390] usb 8-1: SerialNumber: syz [ 308.200150][ T9390] usb 8-1: USB disconnect, device number 7 [ 308.851780][ T50] usb 8-1: new high-speed USB device number 8 using dummy_hcd 03:33:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 03:33:26 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x1000000000000003, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) exit_group(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0xf0, r5, 0x1, 0x70bd25, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xdc, 0x11d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd5, 0x3, "e761c2344b72fccb982e04e8c128b0669366c0f820be4f18b64a03e769263eaf7296495cb92df50d157cb7700e890373b1f6fd09c4e2c944bdc58d0c737141aecbf6c616bbfd42b43348c85ca8fc797577c6afe30268a8f287c556de145dfbd5e14479f747573e4070c7b302802508d40684fab3b5f1990896f3cb634964ba263167384a595e3aaa289ce5743f3b2405b3ac85df4d28cef8f67d222c9fa62a88552cdc8f01bf8374c817e2bcad8120ea8b3ce2167b00bfd7008b074961a33fcb8d817df31f5b179d2476eb21f5503b7eb4"}]}]}, 0xf0}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "46b5d2eb75896220b16574749e"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000009}, 0x40) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r3, r6, 0x0, 0x1) 03:33:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 03:33:26 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) [ 309.449268][T11237] netlink: 209 bytes leftover after parsing attributes in process `syz-executor.2'. 03:33:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) 03:33:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x101}) sendfile(r0, r1, 0x0, 0x1) 03:33:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) [ 309.600995][ T50] usb 8-1: device not accepting address 8, error -71 03:33:27 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x1000000000000003, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x1, 0x8, 0x4000, 0x80000, r1}) exit_group(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r2, r3, 0x0, 0x1) 03:33:27 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:27 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:27 executing program 2: clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r2, 0xff, 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x300002, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user='access=user'}], [{@appraise_type='appraise_type=imasig'}]}}) sendfile(r0, r1, 0x0, 0x1) 03:33:27 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rfcomm\x00') sendfile(r0, r1, 0x0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r2, 0xff, 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1, 0x400000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r3, 0x1000000000000003, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000000c0)='syz1\x00') setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x7, 0x4) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{}, 0x46, 0x8, &(0x7f0000000100)="63169d737c2e57ae503a1a5d6e7eeba6e2a3c801bb36277488c4ed4f863f35afdb677a089ffa417486446e80d2eb261653da6812144ef4f800e718882953e4e4c5a0d91558d6"}) 03:33:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) [ 310.399953][ T40] audit: type=1400 audit(2000000007.889:64): avc: denied { write } for pid=11296 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:33:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:28 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x103140, 0x0) getpeername$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r2, 0x0, 0x1) 03:33:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:28 executing program 0: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:29 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) unshare(0x2000400) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:29 executing program 0: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={{0x3, 0x0, @reserved="453e17f6983a199c5cc8c2c43b88c1f3e7d93078e4ac440299de9dda82b8ece9"}, 0x3a, 0x0, [], "9e63eae880e854486d5235404b9d26d579420830ca845ab79dd055492d6cd5cb92a87b95a97575e8b13be43c4869892f509919ebf833a8654a1a"}) r2 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r2, &(0x7f0000000280)=""/29, 0x1d) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$negate(0xd, r1, 0x10001, r3) exit_group(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r5, 0xff, 0x1, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x1) socket$nl_audit(0x10, 0x3, 0x9) 03:33:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:29 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:29 executing program 0: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:29 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x228980, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000200)) lseek(r1, 0x1000000000000003, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r4, 0x0, 0x1) 03:33:29 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 03:33:29 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:29 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000080)=0x1) sendfile(r0, r1, 0x0, 0x1) 03:33:30 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 03:33:30 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x2}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000024007d030137000000000000000040480000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000070001006671000004000500240008801c00010080000000000000000000000000000000000000000000000004000200"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x15, 0xf2, 0x80000001, 0xfff, 0x420, r2, 0x6, [], r5, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x40) 03:33:30 executing program 3: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 03:33:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, 0x0, 0x0) 03:33:30 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, 0x0, 0x0) 03:33:30 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) [ 312.793709][ T40] audit: type=1400 audit(2000000010.279:65): avc: denied { map_create } for pid=11380 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 312.981839][T11391] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.138634][T11382] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 03:33:30 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, 0x0, 0x0) 03:33:30 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:33:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:33:30 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 03:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 03:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x80047441, &(0x7f0000000080)) 03:33:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 03:33:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 03:33:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 03:33:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 03:33:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 03:33:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x80047441, &(0x7f0000000080)) 03:33:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, 0x0, 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}]}, 0x34}}, 0x0) 03:33:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, 0x0) 03:33:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}]}, 0x34}}, 0x0) 03:33:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}]}]}, 0x34}}, 0x0) 03:33:33 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, 0x0) 03:33:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}}, 0x0) 03:33:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}}, 0x0) 03:33:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}}, 0x0) 03:33:33 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x80047441, 0x0) 03:33:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, 0x0, 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) 03:33:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_getneigh={0x20, 0x1e, 0x209}, 0x20}}, 0x0) [ 316.951542][ C3] hrtimer: interrupt took 62090746 ns 03:33:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 03:33:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, 0x0, 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:37 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000019c0)) getuid() socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = getpid() sendmmsg$unix(r2, &(0x7f00000071c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r5}}}], 0x20}], 0x1, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r7, 0xff, 0x1, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r8, 0xff, 0x1, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/mISDNtimer\x00', 0x200000, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r9, 0xff, 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x43}, 0xc, &(0x7f0000001840)=[{&(0x7f0000001c00)={0x150c, 0x1026, 0x100, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x26, 0x0, 0x0, @uid}, @generic="c1349f35e3500faa2e027d6234d302dc154d8bcebc0134c6d0e835297669b73286f19008a534f2f36aca51677a0b196a4a9787e1a8d18f7f9e6dda703b4243b9d73fda97ce433b7cadac7e508a60135d4a5416c10b4464c559a0f0c97f6b3af060054a6a8c06e698cd03dccead1d580403d408c2b0fa9ae2bd68413e07a1ea51e9f33ae6af257314fc6a11b3942437cd7adee537dfc61df57c9defde5bbf437f11feb13ab893560c5d2eeba0128b05b17864a43f77dcc28bfec850aacbd25c5582e0e6fd10a93b348b45f84414bcb19089f37b7486c8f19cfa278f51ac23c7501e", @typed={0x4, 0x64}, @generic="634919b41e27267f2a89c59c659452671365a02443f62836bbcd475054e1202d05d50fce2ac92cb38064132f3c94b131dcd594fe70417144c470ec42cb784144898dd811689bcd4b84c7cc85a357639e91e5511c29e47bb6c92f4f16d2fcfea289ca119fa87b4b08c525980dac297cdc90da9952813eb718e290f9a8686cec0e1c34ab65d2dc12393268b35c35ca0f24b99e37097234a75ed12c85939eb9e7ba9b953d72ac53bf6f2e8841a172932f67ba29420cf63987d93a3c21e5385480e73f02182b2dd40a7aa71dbc53ac37b15e4870e91eeb595184cd6200e45b24344ae77edf5b", @typed={0x8, 0x94, 0x0, 0x0, @ipv4=@local}, @generic="46cca7e063dc6f2393aeb2dbf35bc6368af134b6d6c99a44de3459b6aad82ccebe33e91a0291d9a883d79d7d3ab4caf62b52f4", @nested={0x243, 0x7d, 0x0, 0x1, [@generic="f3c60f9d609c5b0eb7a62cf6f737ba2e96ba1c10440e5e05abf6aba0b2717701c61c291eae2cc5caef4725ad6a36271beffc57e5db4a597f662da3f5a2ca6d7409eefb43241ecfee86b42afe4d450be30b1185298108041f07ab9a23bc3824eacdfb814b12455207d6ea84458f0d34d8ee71576744adfd1e5f0c69f43bc726766f4b7936f6fd580b96b7e96c75ff63c7cad5429579edf3c8b26dece7787808d08b0fb77d6c9e889e787969d5912a57dbc872864670fbf42c6c016c896cb8e8f3b44e1d732ec4554e874ebde2ff367005beb0fa003610c97c9d0e252edc951d6c8e7bcd2ec11251434ddc2bd847bd47f7c7f8493cff808823f7", @generic="ce559652f35f07b10990928dd4efe844471e1f96c63887eb00d3c4f4e3d957a659137a1ad76ceb90d7a29636aba6fcdcfab549b00ac59bb567b835b02ab5f5b05dda781b1dbd4ba66816dfb793f6", @typed={0xeb, 0x41, 0x0, 0x0, @binary="3159e0ca86dc4761cd70c37919e70e4d20e61ff17bd2f5ecd5014bfa66c1537682fc8950275a63c7693762d1784d15b0ae32bc6694e577362f5b5dfccac5b2927af689ca12dee08ed960b2db31e90f182f419bd6f039c02e401002e1439589d95fe7d5bcf2f1feb8ac659800d260274990df457387fa2d1524b4b57bec517705e2ddaa83b5055c2203ed1db53e755070d5d80d1a448ac979ce16e5563836a3d5e68e14979e42495e20feea49a5b82314b05b706ee9edced0958412922fb0ebe981aee4b7e99c7a61fe0a6e79d2b89615d55214187921c0e71eb2d300"/231}, @typed={0x8, 0x87, 0x0, 0x0, @uid=r4}, @typed={0x4, 0x23}]}, @typed={0xab, 0x8f, 0x0, 0x0, @binary="a58543575019d0478a04ca42081c31ebe9bdaddfe82857cbc161d8cd2e3e715edeff65530858e2a41e25e9837e8e4ddaba4abcfbf6491d7211b24d7a5e6b277468fa907a967b152ae67d921972fb64057a0c8d78ca82ed7def79b8f41fb2da75a4e86732affcad32426df29cbd5f809f1097d895af23b57653eb9a4b79b24a60aabad8244bf4b662efeccc5c77570c5763503578e6c70ef9025db2fe189980440a22c3497a35a4"}, @generic="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"]}, 0x150c}, {&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="10572a4d314d94c616df46cf41c1ed56480088f052887a5434110ca44449908c0a530b1e6397545c5edee10a9b05e055d2781a19443f1f8759a0545f069386eeea9330fa2cbe548ff5f342f5909056b67dccb41a1dda091675964d60f8ea2fec6800abd840ed6b33c08f4d1a9060a2c5d0c4a1a12c11000000000000c9911d5e3bbb2313cf6df263cd1d65e877085c5ecd99174ff247cefb8351e5e0f34215a6d13402309183b5735012990628c278cb3bc64a4494acb8e048657bbe8969edcf99f92f3b0c71234f705e81e595ba728f9b18a92eb83c14e8de935710312e61433d3f5b661acdc95269825648d2b95d6f08f1582eff89c0e81025c567ff86d9f4f7b94fa4e63c"], 0x1b0}, {&(0x7f00000000c0)={0x18, 0x29, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x7e, 0x0, 0x0, @fd}]}, 0x18}, {&(0x7f00000017c0)=ANY=[@ANYBLOB="480000001c00000826bd7000ffdbdf2542ce982c30f51ed3f5d7f9c3080000008f0b74f8c2e331e5f9ec5a232c6547dea443ce3c98239667d025ecd63bc008003700000000000000"], 0x48}], 0x4, &(0x7f0000001a40)}, 0x40000) sendfile(r0, r1, 0x0, 0x1) 03:33:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 03:33:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_getneigh={0x20, 0x1e, 0x209}, 0x20}}, 0x0) 03:33:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x1, 0x400, 0x4, 0x3, 0x4, 0x101, 0x2, 0x1], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x8, 0x20, 0xc0c0c0c0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r2, 0x0, 0x1) 03:33:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 03:33:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 03:33:39 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 03:33:39 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x1000000000000003, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) exit_group(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r2, 0x0, 0x1) 03:33:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 03:33:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x1000) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:39 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') sendfile(r0, r1, 0x0, 0x14fe) 03:33:39 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:39 executing program 0: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="50020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000280)=0x14) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040009101a020200", 0x33a) 03:33:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, 0x0) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:39 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:39 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x1000000000000003, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r2, 0x0, 0x1) 03:33:40 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) [ 322.539309][T11582] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 03:33:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, 0x0) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) [ 322.617512][T11582] netlink: 246 bytes leftover after parsing attributes in process `syz-executor.0'. 03:33:40 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:40 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:40 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:40 executing program 0: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="50020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000280)=0x14) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040009101a020200", 0x33a) 03:33:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, 0x0) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) [ 323.089635][T11608] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 323.302191][T11608] netlink: 246 bytes leftover after parsing attributes in process `syz-executor.0'. 03:33:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:41 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) 03:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(0xffffffffffffffff, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:42 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) 03:33:43 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(0xffffffffffffffff, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x8) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) clone3(&(0x7f0000000200)={0x2000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x15}, &(0x7f0000000140)=""/40, 0x28, &(0x7f0000000280)=""/23, &(0x7f0000000180)=[r1, r2, 0x0], 0x40000000000001b3, {r0}}, 0x58) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r4, 0x0, 0x1) 03:33:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(0xffffffffffffffff, &(0x7f0000000200)=""/231, 0x1000006ce) 03:33:43 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) 03:33:43 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, 0x0, 0x0) 03:33:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) 03:33:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) 03:33:44 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, 0x0, 0x0) 03:33:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 03:33:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x41) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x1000) read(r0, 0x0, 0x0) 03:33:44 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000400)='net/unix\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r2, 0x0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x22, &(0x7f0000000080)="a05ff01fe72b51f1414df77f307da5bfca222c85a319eee62c45831ca6a55378eec2", 0xa7, 0x0, &(0x7f00000000c0)="e82488745b7ad7efc4d3166d50c9ac30ca434e8532f99b1f7c4eee277e574d5b23c222a0954552e312a1aac7aaae44a7148d1dde0cb8b1b486b5ef546bae8ff32df9b7a2f0e5b417cc836a4779fa4c98b25425458014af4c0e4e35a545b3ec6b5d4bd6aa3f90c32d011b98466783fb00e66bfce91ab9260ae57ce8fd23c554b20f6e964f6fc5a078d2864125021c401b9ce20da496b82ddacb20e4cfda90a01a4628a3a297cb90"}) unlinkat(r2, &(0x7f0000000200)='./file0\x00', 0x200) r4 = request_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='\'+\x00', 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r5, &(0x7f0000000280)=""/29, 0x1d) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$search(0xa, r4, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, r6) 03:33:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 03:33:44 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4001) sendfile(r0, r1, 0x0, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000000c0)=0x40, 0x4) 03:33:44 executing program 1: 03:33:44 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 03:33:44 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe, 0x68, 0x60, 0x8, 0x82d, 0x100, 0xf2a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x98, 0x18, 0x7e}}]}}]}}, 0x0) 03:33:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000002) 03:33:44 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:45 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000002) [ 327.768333][ T5] usb 6-1: new high-speed USB device number 3 using dummy_hcd 03:33:45 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000002) [ 328.283812][ T5] usb 6-1: Using ep0 maxpacket: 8 03:33:45 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x800000, 0x0) [ 328.500843][ T5] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=f2.a3 [ 328.841232][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.188507][ T5] usb 6-1: config 0 descriptor?? [ 329.688378][ T9390] usb 6-1: USB disconnect, device number 3 [ 330.592272][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd 03:33:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) 03:33:48 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000100001"], 0x28}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)) 03:33:48 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) 03:33:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) [ 331.371387][ T35] usb 6-1: device not accepting address 4, error -71 03:33:48 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 03:33:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 03:33:48 executing program 0: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) 03:33:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/87) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000000c0)=""/133) getpid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='oom_score_adj\x00') syz_open_dev$sndhw(&(0x7f0000000080)='/dev/snd/hwC#D#\x00', 0x10001, 0x408000) sendfile(r0, r3, 0x0, 0x1) 03:33:49 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x800000, 0x0) 03:33:49 executing program 0: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000002) 03:33:49 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:33:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 03:33:49 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x800000, 0x0) 03:33:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 03:33:49 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x800000, 0x0) 03:33:49 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) 03:33:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000002) 03:33:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000002) 03:33:49 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) 03:33:49 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000002) 03:33:49 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x1000000000000003, 0x0) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x1000, "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"}, &(0x7f0000001180)=0x1008) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3}, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x10001, 0x81}, &(0x7f0000000100)=0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r4, 0xff, 0x12, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r5, r6, 0x0, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r7, 0x1000000000000003, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r7, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, 0x54, &(0x7f0000ffb000/0x3000)=nil, 0x8}) 03:33:50 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/197, 0xc5}}], 0x4e, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) 03:33:50 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000002) 03:33:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x0) 03:33:50 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:33:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x0) 03:33:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x0) 03:33:50 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:33:50 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r6, 0x301, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x201000a}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="06082bbd7000fddbdf250f000400080039002cb8000008002c00f718000805002f000000000008000600", @ANYRES32=0x0, @ANYBLOB="0800320002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) 03:33:50 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='\x00', 0x0, r3) sendfile(r0, r1, 0x0, 0x1) 03:33:50 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:33:50 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:33:50 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r2, 0x1000000000000003, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000080)='syz1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r3, 0x1000000000000003, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0xffffffff, 0x3, 0x6001, 0x9, 0x1, 0x3, 0x1, 0x2}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r4, 0x1000000000000003, 0x0) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x2, @broadcast, 'vlan1\x00'}}, 0x1e) [ 333.948073][T11848] ================================================================== [ 333.970537][T11848] BUG: KASAN: use-after-free in sock_def_write_space+0x609/0x630 [ 333.970537][T11848] Read of size 8 at addr ffff8880114a9080 by task syz-executor.1/11848 [ 334.016844][T11848] [ 334.016844][T11848] CPU: 2 PID: 11848 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 334.091993][T11848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 334.091993][T11848] Call Trace: [ 334.181218][T11848] dump_stack+0x18f/0x20d [ 334.196724][T11848] ? sock_def_write_space+0x609/0x630 [ 334.196724][T11848] ? sock_def_write_space+0x609/0x630 [ 334.196724][T11848] print_address_description.constprop.0.cold+0xae/0x436 [ 334.196724][T11848] ? vprintk_func+0x97/0x1a6 [ 334.196724][T11848] ? sock_def_write_space+0x609/0x630 [ 334.196724][T11848] kasan_report.cold+0x1f/0x37 [ 334.196724][T11848] ? sock_def_write_space+0x609/0x630 [ 334.196724][T11848] sock_def_write_space+0x609/0x630 [ 334.196724][T11848] sock_wfree+0x1cc/0x240 [ 334.410468][T11848] ? __sk_receive_skb+0x830/0x830 [ 334.410468][T11848] skb_release_head_state+0x9f/0x250 [ 334.410468][T11848] consume_skb+0x89/0x160 [ 334.521414][T11848] __dev_kfree_skb_any+0x9c/0xc0 [ 334.533994][T11848] napi_consume_skb+0x24f/0x370 [ 334.559340][T11848] free_old_xmit_skbs+0xd5/0x230 [ 334.559340][T11848] ? virtnet_set_coalesce+0x2a0/0x2a0 [ 334.559340][T11848] ? dev_queue_xmit_nit+0x828/0xac0 [ 334.559340][T11848] start_xmit+0x123/0x15f0 [ 334.559340][T11848] dev_hard_start_xmit+0x193/0x950 [ 334.559340][T11848] sch_direct_xmit+0x2e1/0xbd0 [ 334.559340][T11848] ? dev_watchdog+0xc80/0xc80 [ 334.559340][T11848] ? pfifo_fast_dequeue+0x5a1/0xb20 [ 334.559340][T11848] ? lock_is_held_type+0xbb/0xf0 [ 334.694153][T11848] __qdisc_run+0x4b9/0x1620 [ 334.694153][T11848] __dev_queue_xmit+0x1456/0x2d60 [ 334.694153][T11848] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 334.694153][T11848] ? iov_iter_advance+0xb5/0xea0 [ 334.694153][T11848] ? memcpy+0x39/0x60 [ 334.694153][T11848] ? eth_header+0x15e/0x1e0 [ 334.694153][T11848] ? ether_setup+0x2d0/0x2d0 [ 334.694153][T11848] llc_build_and_send_ui_pkt+0x1ee/0x270 [ 334.694153][T11848] llc_ui_sendmsg+0x759/0x1000 [ 334.694153][T11848] ? llc_ui_bind+0xd20/0xd20 [ 334.694153][T11848] ? __copy_msghdr_from_user+0x2b4/0x4b0 [ 334.694153][T11848] ? llc_ui_bind+0xd20/0xd20 [ 334.694153][T11848] sock_sendmsg+0xcf/0x120 [ 334.694153][T11848] ____sys_sendmsg+0x331/0x810 [ 334.694153][T11848] ? kernel_sendmsg+0x50/0x50 [ 334.694153][T11848] ? do_recvmmsg+0x6d0/0x6d0 [ 334.904365][T11848] ? __lock_acquire+0x16cb/0x5640 [ 334.926450][T11848] ___sys_sendmsg+0xf3/0x170 [ 334.926450][T11848] ? sendmsg_copy_msghdr+0x160/0x160 [ 334.926450][T11848] ? lock_acquire+0x1f1/0xad0 [ 334.926450][T11848] ? __might_fault+0xef/0x1d0 [ 334.926450][T11848] ? find_held_lock+0x2d/0x110 [ 334.926450][T11848] ? __might_fault+0x11f/0x1d0 [ 334.926450][T11848] ? lock_downgrade+0x830/0x830 [ 334.926450][T11848] ? asm_exc_page_fault+0x1e/0x30 [ 334.926450][T11848] ? lock_is_held_type+0xbb/0xf0 [ 334.926450][T11848] __sys_sendmmsg+0x195/0x480 [ 334.926450][T11848] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 334.926450][T11848] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 334.926450][T11848] ? _copy_to_user+0x126/0x160 [ 334.926450][T11848] ? put_timespec64+0xcb/0x120 [ 334.926450][T11848] ? ns_to_timespec64+0xc0/0xc0 [ 334.926450][T11848] ? lock_is_held_type+0xbb/0xf0 [ 334.926450][T11848] ? lock_is_held_type+0xbb/0xf0 [ 334.926450][T11848] ? syscall_enter_from_user_mode+0x20/0x290 [ 334.926450][T11848] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 334.926450][T11848] __x64_sys_sendmmsg+0x99/0x100 [ 334.926450][T11848] do_syscall_64+0x2d/0x70 [ 334.926450][T11848] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 334.926450][T11848] RIP: 0033:0x45cad9 [ 334.926450][T11848] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 334.926450][T11848] RSP: 002b:00007fc85956cc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.926450][T11848] RAX: ffffffffffffffda RBX: 0000000000715cc0 RCX: 000000000045cad9 [ 334.926450][T11848] RDX: 03fffffffffffeed RSI: 0000000020001380 RDI: 0000000000000004 [ 334.926450][T11848] RBP: 00000000004a9b5e R08: 0000000000000000 R09: 0000000000000000 [ 334.926450][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000074bf00 [ 334.926450][T11848] R13: 00007ffd2c23d99f R14: 00007fc85954d000 R15: 0000000000000003 [ 334.926450][T11848] [ 334.926450][T11848] Allocated by task 11851: [ 334.926450][T11848] save_stack+0x1b/0x40 [ 334.926450][T11848] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 334.926450][T11848] kmem_cache_alloc+0x12c/0x3b0 [ 334.926450][T11848] sock_alloc_inode+0x18/0x1c0 [ 334.926450][T11848] alloc_inode+0x61/0x230 [ 334.926450][T11848] new_inode_pseudo+0x14/0xe0 [ 334.926450][T11848] sock_alloc+0x3c/0x260 [ 334.926450][T11848] __sock_create+0xb9/0x740 [ 334.926450][T11848] __sys_socket+0xef/0x200 [ 334.926450][T11848] __x64_sys_socket+0x6f/0xb0 [ 334.926450][T11848] do_syscall_64+0x2d/0x70 [ 334.926450][T11848] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 334.926450][T11848] [ 334.926450][T11848] Freed by task 0: [ 334.926450][T11848] save_stack+0x1b/0x40 [ 334.926450][T11848] __kasan_slab_free+0xf5/0x140 [ 334.926450][T11848] kmem_cache_free+0x7f/0x310 [ 334.926450][T11848] i_callback+0x3f/0x70 [ 334.926450][T11848] rcu_core+0x5c7/0x1190 [ 334.926450][T11848] __do_softirq+0x2de/0xa24 [ 334.926450][T11848] [ 334.926450][T11848] The buggy address belongs to the object at ffff8880114a9000 [ 334.926450][T11848] which belongs to the cache sock_inode_cache(65:syz3) of size 1216 [ 334.926450][T11848] The buggy address is located 128 bytes inside of [ 334.926450][T11848] 1216-byte region [ffff8880114a9000, ffff8880114a94c0) [ 334.926450][T11848] The buggy address belongs to the page: [ 334.926450][T11848] page:ffffea0000452a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880114a9ffd [ 334.926450][T11848] flags: 0xfffe0000000200(slab) [ 334.926450][T11848] raw: 00fffe0000000200 ffffea00006f0a48 ffffea00006cf808 ffff88805b1dec40 [ 334.926450][T11848] raw: ffff8880114a9ffd ffff8880114a9000 0000000100000003 0000000000000000 [ 334.926450][T11848] page dumped because: kasan: bad access detected [ 334.926450][T11848] [ 334.926450][T11848] Memory state around the buggy address: [ 334.926450][T11848] ffff8880114a8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 334.926450][T11848] ffff8880114a9000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.926450][T11848] >ffff8880114a9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.926450][T11848] ^ [ 334.926450][T11848] ffff8880114a9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.926450][T11848] ffff8880114a9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.926450][T11848] ================================================================== [ 334.926450][T11848] Disabling lock debugging due to kernel taint [ 336.043360][T11848] Kernel panic - not syncing: panic_on_warn set ... [ 336.051868][T11848] CPU: 2 PID: 11848 Comm: syz-executor.1 Tainted: G B 5.8.0-syzkaller #0 [ 336.109803][T11848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 336.151992][T11848] Call Trace: [ 336.158702][T11848] dump_stack+0x18f/0x20d [ 336.158702][T11848] ? sock_def_write_space+0x5e0/0x630 [ 336.158702][T11848] panic+0x2e3/0x75c [ 336.158702][T11848] ? __warn_printk+0xf3/0xf3 [ 336.158702][T11848] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 336.158702][T11848] ? trace_hardirqs_on+0x55/0x220 [ 336.158702][T11848] ? sock_def_write_space+0x609/0x630 [ 336.158702][T11848] ? sock_def_write_space+0x609/0x630 [ 336.158702][T11848] end_report+0x4d/0x53 [ 336.158702][T11848] kasan_report.cold+0xd/0x37 [ 336.158702][T11848] ? sock_def_write_space+0x609/0x630 [ 336.158702][T11848] sock_def_write_space+0x609/0x630 [ 336.158702][T11848] sock_wfree+0x1cc/0x240 [ 336.158702][T11848] ? __sk_receive_skb+0x830/0x830 [ 336.158702][T11848] skb_release_head_state+0x9f/0x250 [ 336.158702][T11848] consume_skb+0x89/0x160 [ 336.158702][T11848] __dev_kfree_skb_any+0x9c/0xc0 [ 336.158702][T11848] napi_consume_skb+0x24f/0x370 [ 336.158702][T11848] free_old_xmit_skbs+0xd5/0x230 [ 336.158702][T11848] ? virtnet_set_coalesce+0x2a0/0x2a0 [ 336.158702][T11848] ? dev_queue_xmit_nit+0x828/0xac0 [ 336.158702][T11848] start_xmit+0x123/0x15f0 [ 336.158702][T11848] dev_hard_start_xmit+0x193/0x950 [ 336.158702][T11848] sch_direct_xmit+0x2e1/0xbd0 [ 336.158702][T11848] ? dev_watchdog+0xc80/0xc80 [ 336.158702][T11848] ? pfifo_fast_dequeue+0x5a1/0xb20 [ 336.158702][T11848] ? lock_is_held_type+0xbb/0xf0 [ 336.158702][T11848] __qdisc_run+0x4b9/0x1620 [ 336.158702][T11848] __dev_queue_xmit+0x1456/0x2d60 [ 336.158702][T11848] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 336.158702][T11848] ? iov_iter_advance+0xb5/0xea0 [ 336.158702][T11848] ? memcpy+0x39/0x60 [ 336.158702][T11848] ? eth_header+0x15e/0x1e0 [ 336.158702][T11848] ? ether_setup+0x2d0/0x2d0 [ 336.158702][T11848] llc_build_and_send_ui_pkt+0x1ee/0x270 [ 336.158702][T11848] llc_ui_sendmsg+0x759/0x1000 [ 336.158702][T11848] ? llc_ui_bind+0xd20/0xd20 [ 336.158702][T11848] ? __copy_msghdr_from_user+0x2b4/0x4b0 [ 336.158702][T11848] ? llc_ui_bind+0xd20/0xd20 [ 336.158702][T11848] sock_sendmsg+0xcf/0x120 [ 336.158702][T11848] ____sys_sendmsg+0x331/0x810 [ 336.158702][T11848] ? kernel_sendmsg+0x50/0x50 [ 336.158702][T11848] ? do_recvmmsg+0x6d0/0x6d0 [ 336.158702][T11848] ? __lock_acquire+0x16cb/0x5640 [ 336.158702][T11848] ___sys_sendmsg+0xf3/0x170 [ 336.158702][T11848] ? sendmsg_copy_msghdr+0x160/0x160 [ 336.158702][T11848] ? lock_acquire+0x1f1/0xad0 [ 336.158702][T11848] ? __might_fault+0xef/0x1d0 [ 336.158702][T11848] ? find_held_lock+0x2d/0x110 [ 336.158702][T11848] ? __might_fault+0x11f/0x1d0 [ 336.158702][T11848] ? lock_downgrade+0x830/0x830 [ 336.158702][T11848] ? asm_exc_page_fault+0x1e/0x30 [ 336.158702][T11848] ? lock_is_held_type+0xbb/0xf0 [ 336.158702][T11848] __sys_sendmmsg+0x195/0x480 [ 336.158702][T11848] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 336.158702][T11848] ? read_seqcount_begin.constprop.0+0xd9/0x1f0 [ 336.158702][T11848] ? _copy_to_user+0x126/0x160 [ 336.158702][T11848] ? put_timespec64+0xcb/0x120 [ 336.158702][T11848] ? ns_to_timespec64+0xc0/0xc0 [ 336.158702][T11848] ? lock_is_held_type+0xbb/0xf0 [ 336.158702][T11848] ? lock_is_held_type+0xbb/0xf0 [ 336.158702][T11848] ? syscall_enter_from_user_mode+0x20/0x290 [ 336.158702][T11848] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 336.158702][T11848] __x64_sys_sendmmsg+0x99/0x100 [ 336.158702][T11848] do_syscall_64+0x2d/0x70 [ 336.158702][T11848] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 336.158702][T11848] RIP: 0033:0x45cad9 [ 336.158702][T11848] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.158702][T11848] RSP: 002b:00007fc85956cc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 336.158702][T11848] RAX: ffffffffffffffda RBX: 0000000000715cc0 RCX: 000000000045cad9 [ 336.158702][T11848] RDX: 03fffffffffffeed RSI: 0000000020001380 RDI: 0000000000000004 [ 336.158702][T11848] RBP: 00000000004a9b5e R08: 0000000000000000 R09: 0000000000000000 [ 336.158702][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000074bf00 [ 336.158702][T11848] R13: 00007ffd2c23d99f R14: 00007fc85954d000 R15: 0000000000000003 [ 336.158702][T11848] Kernel Offset: disabled [ 336.158702][T11848] Rebooting in 86400 seconds..