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", 0x1000}, {&(0x7f0000002280)="121b5f7accfe7b53a24c13eef723ed1a67d07b406fbf6231b823ec5c87f264ee979408d012853a20ecab511dc2f81e3cebb5ee4d9efa62550cbf85e45c15e0254c610579ef1ac01c57b8732cdf2395466dd48247f469f8b0db17e69f1fc1a7ed501d870d401de5f53a8da70881587c8b0ed98f221a9c4dd338", 0xfffffffffffffced}, {&(0x7f0000002300)="1d37168bfe06b20829735554b852bcdbfc310878cb4aed580c7195cd612be14906e03ca8fa89ff10014a98127e8df7cd571449a899db7fdc010b2389da79ce281340c63ec89972588010ebc453c50c05578e18bdd919b7c9a0c07a0891802a811b3c29341bfcc1ef5649b30a3bb2f3b6fdf7438b7cc5695ca7f8610dac39d96bcb377ee64d24fc00867be394662fd6bd4ef78cda282f7ef05056088de556410cb70121c67d8979eaba3648299e652503176de7043fc119791160f2b34474ced7632d2996ab9b3a", 0xc7}, {&(0x7f0000002400)="ef4033f485459fd3ef120c5329f75dacd9884420e24fbcda09318432f7fda87212b864070386435e48542d3152370f3d04dd3987bcdce1cab5e93c8baf108007b2b2d1ec4496396fa4e0ca2c6611d1b7547513301e73250619382d9bffc7925763f1e0abb46062ff00b2ddcefeb7bde337ec025bbf635d6730021206f8dc658bc3a163739f3c488faeecfafb6d724c2d", 0x90}], 0x7, 0x0) 05:36:38 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:36:38 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/110, 0x6e) getdents64(r0, 0x0, 0x0) 05:36:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x40101283, 0xffffffffffffffff) 05:36:38 executing program 5: mlockall(0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @private}, &(0x7f0000000200)=0xc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) 05:36:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0xc0, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0) 05:36:38 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @empty}}}]}]}, 0x44}}, 0x0) 05:36:38 executing program 2: socketpair(0x2, 0x803, 0x5, &(0x7f00000052c0)) 05:36:38 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) 05:36:39 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 05:36:39 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:36:39 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0xc, 0x0, "9c61d2f2"}, &(0x7f0000000140), 0x0) 05:36:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0xf}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 05:36:39 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653021f014d336b04b030400000000000092290a7e0055a763c15ceda085e276ed3ae7a290ab0e"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 163.263994][T11441] ptrace attach of "/root/syz-executor.2"[11439] was attempted by "/root/syz-executor.2"[11441] 05:36:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x37) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x82000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x2) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x200, 0x0) ioctl$CHAR_RAW_ZEROOUT(r5, 0x127f, &(0x7f00000002c0)={0x8700, 0x7}) r6 = socket(0x11, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001900)={'batadv0\x00', 0x0}) ioctl$CHAR_RAW_IOOPT(r0, 0x1279, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000002d80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d40)={&(0x7f0000001980)={0x1354, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x12c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'prefer'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'staff_u'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6f02}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mode'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fowner<'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffeff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'fsuuid'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'smackfshat'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "04c607950c17e29c4d1bf0ee5659848b5ca9dec053c4a96e3bfa97fdcb74e8be1ce80de89e083d4cf282c4db0e41afc7328eca4c4655bd3fa94f0c2cc9cad0ed5aaea6a710f219983d50d3a694749ebc36ae7f047b2849935f9cd97838e7315477a7279d808c512b521e5910b411da5d3afa132b6b5af46dcddb5f2127f602f9e3d0ac1dd58d798ebb08fbffee16c73e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'dont_measure'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(!-[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'fsuuid'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '%./#/!\'\xe2C,@#d\xfe\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'smackfshat'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mask'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mode'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'gid'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mask'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fowner<'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%+\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x100}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1354}, 0x1, 0x0, 0x0, 0x40010}, 0x4) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r1, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) 05:36:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00') read$FUSE(r0, 0x0, 0x0) 05:36:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 05:36:39 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653021f014d336b04b030400000000000092290a7e0055a763c15ceda085e276ed3ae7a290ab0e"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:36:39 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653021f014d336b04b030400000000000092290a7e0055a763c15ceda085e276ed3ae7a290ab0e"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 163.568008][T11460] ptrace attach of "/root/syz-executor.2"[11456] was attempted by "/root/syz-executor.2"[11460] 05:36:39 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:39 executing program 4: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) 05:36:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000) 05:36:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x202e) read$FUSE(r0, 0x0, 0x0) 05:36:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') read$char_raw(r0, 0x0, 0x7400) 05:36:39 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c653021f014d336b04b030400000000000092290a7e0055a763c15ceda085e276ed3ae7a290ab0e"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:36:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000) 05:36:39 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000001c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)='./file0\x00') 05:36:39 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5416, &(0x7f0000000040)) [ 163.977286][T11481] ptrace attach of "/root/syz-executor.1"[11479] was attempted by "/root/syz-executor.1"[11481] 05:36:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) 05:36:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000) 05:36:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, 0x1, 0x4, 0x401}, 0x14}}, 0x0) 05:36:40 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000) 05:36:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') read$char_raw(r0, 0x0, 0x0) 05:36:40 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001440)=""/4096, 0xffffffe4}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x300}, 0x4000040) 05:36:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c06, 0xffffffffffffffff) 05:36:40 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) 05:36:40 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) 05:36:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000000c0)) 05:36:40 executing program 4: timerfd_create(0x0, 0xa4100c4bd0caa340) 05:36:40 executing program 5: 05:36:40 executing program 2: 05:36:40 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) 05:36:41 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:41 executing program 2: 05:36:41 executing program 1: 05:36:41 executing program 4: 05:36:41 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) 05:36:41 executing program 5: 05:36:41 executing program 4: 05:36:41 executing program 1: 05:36:41 executing program 5: 05:36:41 executing program 2: 05:36:41 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000) 05:36:41 executing program 4: 05:36:42 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:42 executing program 1: 05:36:42 executing program 5: 05:36:42 executing program 2: 05:36:42 executing program 4: 05:36:42 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000) 05:36:42 executing program 5: 05:36:42 executing program 1: 05:36:42 executing program 4: 05:36:42 executing program 2: 05:36:42 executing program 0: r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000) 05:36:42 executing program 5: 05:36:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:43 executing program 2: 05:36:43 executing program 4: 05:36:43 executing program 1: 05:36:43 executing program 5: 05:36:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) 05:36:43 executing program 5: 05:36:43 executing program 2: 05:36:43 executing program 4: 05:36:43 executing program 5: 05:36:43 executing program 1: 05:36:43 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) 05:36:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:44 executing program 2: 05:36:44 executing program 4: 05:36:44 executing program 5: 05:36:44 executing program 1: 05:36:44 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) 05:36:44 executing program 5: 05:36:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, 0x0, 0x0) 05:36:44 executing program 1: 05:36:44 executing program 2: 05:36:44 executing program 5: 05:36:44 executing program 4: 05:36:45 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, 0x0, 0x0) 05:36:45 executing program 1: 05:36:45 executing program 5: 05:36:45 executing program 2: 05:36:45 executing program 4: 05:36:45 executing program 5: 05:36:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, 0x0, 0x0) 05:36:45 executing program 4: 05:36:45 executing program 2: 05:36:45 executing program 1: 05:36:45 executing program 5: 05:36:45 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:45 executing program 0: 05:36:45 executing program 2: 05:36:45 executing program 4: 05:36:45 executing program 1: 05:36:45 executing program 5: 05:36:46 executing program 1: 05:36:46 executing program 5: 05:36:46 executing program 4: 05:36:46 executing program 2: 05:36:46 executing program 0: 05:36:46 executing program 1: 05:36:46 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:46 executing program 5: 05:36:46 executing program 4: 05:36:46 executing program 0: 05:36:46 executing program 2: 05:36:46 executing program 1: 05:36:46 executing program 0: 05:36:46 executing program 5: 05:36:46 executing program 1: 05:36:46 executing program 2: 05:36:46 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:46 executing program 4: 05:36:46 executing program 0: 05:36:46 executing program 4: 05:36:46 executing program 5: 05:36:46 executing program 1: 05:36:47 executing program 2: 05:36:47 executing program 0: 05:36:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x16102, 0x0) 05:36:47 executing program 5: 05:36:47 executing program 2: 05:36:47 executing program 1: 05:36:47 executing program 4: 05:36:47 executing program 0: 05:36:47 executing program 2: 05:36:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x16102, 0x0) 05:36:47 executing program 5: 05:36:47 executing program 0: 05:36:47 executing program 1: 05:36:47 executing program 4: 05:36:47 executing program 2: 05:36:47 executing program 5: 05:36:47 executing program 0: 05:36:47 executing program 1: 05:36:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x16102, 0x0) 05:36:47 executing program 4: 05:36:47 executing program 2: 05:36:47 executing program 5: 05:36:47 executing program 1: 05:36:47 executing program 4: 05:36:47 executing program 0: 05:36:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x16102, 0x0) 05:36:47 executing program 1: 05:36:47 executing program 5: 05:36:47 executing program 2: 05:36:47 executing program 4: 05:36:47 executing program 0: 05:36:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x0, 0x16102, 0x0) 05:36:47 executing program 0: 05:36:47 executing program 2: 05:36:47 executing program 1: 05:36:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 05:36:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e40)) 05:36:47 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8901, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nl=@unspec, @l2}) 05:36:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x0, 0x16102, 0x0) 05:36:47 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x2000004c, &(0x7f00000000c0)={0x0}}, 0x0) 05:36:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vxcan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x1a}}) 05:36:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) 05:36:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x0, 0x16102, 0x0) 05:36:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8901, &(0x7f0000000080)={'sit0\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000003480)={'syztnl2\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f000000fc40)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_PMK(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x0, 0x2, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x80, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa8a}, @exit, @call={0x85, 0x0, 0x0, 0x39}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @alu={0x3, 0x0, 0x1, 0x5, 0x8, 0x30}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, [], r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe80}, 0x78) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x4, 0x81, 0x9, 0x1df0ea23, 0x11, @mcast1, @mcast1, 0x27, 0x10, 0x100, 0xfffff00d}}) 05:36:47 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004300)={0x2, 0x7, 0x0, 0x3, 0x2}, 0x10}}, 0x0) 05:36:47 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @rand_addr=0x64010100}, @phonet, 0x6}) 05:36:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:47 executing program 0: clock_gettime(0x7, &(0x7f00000001c0)) 05:36:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000021c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 05:36:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x0, 0x0) 05:36:47 executing program 1: bpf$ITER_CREATE(0x8, 0x0, 0x0) 05:36:47 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00'}, 0x10) [ 171.957376][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:47 executing program 4: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) 05:36:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x7, 0x9, 0x5, 0x12, 0xffffffffffffffff, 0xfffffff7, [], 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x40) 05:36:48 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'batadv0\x00'}) [ 172.087645][T11817] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004300)={0x2, 0x7, 0x0, 0x3, 0x2}, 0x10}}, 0x0) 05:36:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:48 executing program 0: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 05:36:48 executing program 1: r0 = socket(0x1e, 0x2, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) [ 172.340090][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:48 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x0, 0x0) 05:36:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 05:36:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 05:36:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:48 executing program 5: r0 = socket(0x15, 0x5, 0x0) bind$rxrpc(r0, 0x0, 0x0) 05:36:48 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x28}, 0xc) 05:36:48 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@empty, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "beea4f", 0x44, 0x2f, 0x0, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}, 0x0) [ 172.852630][T11883] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:48 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:48 executing program 5: socket(0x10, 0x3, 0x81) 05:36:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 05:36:49 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x300}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x5a2, 0x0, 0x0) 05:36:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:49 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8916, &(0x7f0000000080)={'sit0\x00', 0x0}) 05:36:49 executing program 5: bpf$ITER_CREATE(0x11, 0x0, 0x0) 05:36:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @local}, @nl, @in={0x2, 0x0, @multicast2}}) 05:36:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) 05:36:49 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:49 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 05:36:49 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000a80)='batadv\x00') 05:36:49 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:50 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:36:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:50 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:50 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x8, @loopback, 0x3}, 0x1c) 05:36:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:50 executing program 3: r0 = socket(0x23, 0x2, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 05:36:50 executing program 1: r0 = epoll_create(0xcd) r1 = socket$can_j1939(0x1d, 0x2, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20002004}) 05:36:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8980, &(0x7f0000000080)={'sit0\x00', 0x0}) 05:36:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}]}]}, 0x24}}, 0x0) 05:36:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:50 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:50 executing program 5: bpf$ITER_CREATE(0x4, 0x0, 0x0) 05:36:50 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x44}}, 0x0) 05:36:50 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nl=@unspec, @l2, 0x73d}) 05:36:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, 0x0, 0x0) 05:36:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ppoll(&(0x7f0000000140)=[{r0}, {r1}], 0x2, &(0x7f0000000180), 0x0, 0x0) 05:36:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:36:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@empty, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "beea4f", 0x44, 0x2f, 0x0, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, 0x0) 05:36:50 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) 05:36:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007948008000400b000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 05:36:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:36:50 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000940)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 05:36:50 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x13, r0, 0x0) 05:36:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x67}}, 0x0) 05:36:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:36:51 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee05fb607a9585dc0b411519fd3b65066522", 0x19}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 05:36:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8903, &(0x7f0000000080)={'sit0\x00', 0x0}) 05:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 05:36:51 executing program 3: syz_emit_ethernet(0x92, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x10, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @broadcast, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x5, "e8ee39"}, {0x0, 0x10, "3202fc374a93800fc73d33a7f803"}, {0x0, 0xc, "8014465e6ab40c4c1d52"}, {0x0, 0x2}]}]}}}}}}, 0x0) [ 175.092466][ T28] audit: type=1804 audit(1602394611.024:6): pid=12024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir308962366/syzkaller.oj40BT/143/cgroup.controllers" dev="sda1" ino=16052 res=1 errno=0 [ 175.122561][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) [ 175.155074][T12039] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:36:51 executing program 5: clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f00000007c0)={0x0, r0+60000000}, 0x0, 0x0) 05:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 05:36:51 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 05:36:51 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 05:36:51 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'team_slave_1\x00'}) 05:36:51 executing program 3: socketpair(0x2, 0x2, 0x1, &(0x7f00000000c0)) 05:36:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 05:36:51 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 05:36:51 executing program 1: socket(0xa, 0x6, 0x4) 05:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 05:36:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:51 executing program 3: r0 = socket(0x2, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, 0x1c) 05:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) 05:36:51 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 05:36:51 executing program 1: bpf$ITER_CREATE(0x15, &(0x7f0000000a80), 0x8) 05:36:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 05:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 175.857082][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:51 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) connect$ax25(r0, 0x0, 0x0) 05:36:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) [ 175.947781][T12097] device bond1 entered promiscuous mode [ 175.965532][T12097] 8021q: adding VLAN 0 to HW filter on device bond1 05:36:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) [ 175.991679][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:52 executing program 3: socket$caif_seqpacket(0x25, 0x5, 0x1) 05:36:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) 05:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 05:36:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004b80)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 05:36:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:52 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x17) [ 176.121465][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 176.137272][T12158] device bond2 entered promiscuous mode [ 176.147671][T12158] 8021q: adding VLAN 0 to HW filter on device bond2 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) 05:36:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 05:36:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000700)=@sco={0x1f, @none}, 0x80) 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) 05:36:52 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/user\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 05:36:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x3f00, 0x0, 'ansi_cprng\x00'}, 0x58) 05:36:52 executing program 1: r0 = socket(0x23, 0x2, 0x0) recvmsg$can_bcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x40) [ 176.267447][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 176.304566][T12200] device bond3 entered promiscuous mode 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) 05:36:52 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) [ 176.345860][T12200] 8021q: adding VLAN 0 to HW filter on device bond3 05:36:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:36:52 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0x11, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) 05:36:52 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:52 executing program 1: r0 = socket(0x2, 0x2, 0x0) bind$rxrpc(r0, 0x0, 0xf) 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) [ 176.497455][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x7, 0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 05:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:36:52 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) [ 176.567089][T12264] device bond4 entered promiscuous mode [ 176.601084][T12264] 8021q: adding VLAN 0 to HW filter on device bond4 05:36:52 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5411, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nl=@unspec, @l2}) 05:36:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:36:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x0) 05:36:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000a06010100000000000000000000000008000940a171000005000100070000000900020073797a300000000014000880100007800c000180"], 0x44}}, 0x0) 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000"], 0x44}}, 0x0) 05:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) 05:36:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x0) 05:36:52 executing program 1: bpf$ITER_CREATE(0x2, &(0x7f0000000a80), 0x8) 05:36:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 176.824654][T12322] device bond5 entered promiscuous mode 05:36:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) 05:36:52 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) [ 176.873616][T12322] 8021q: adding VLAN 0 to HW filter on device bond5 05:36:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x18, r1, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 05:36:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x401}, 0x14}}, 0x0) 05:36:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000"], 0x44}}, 0x0) 05:36:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x0) 05:36:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe}}) 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) [ 177.026439][T12381] __nla_validate_parse: 3 callbacks suppressed [ 177.026447][T12381] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:53 executing program 1: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x9a96cecc81f5b063) 05:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000"], 0x44}}, 0x0) [ 177.073611][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) [ 177.125759][T12383] device bond6 entered promiscuous mode [ 177.149147][T12383] 8021q: adding VLAN 0 to HW filter on device bond6 05:36:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000002f00)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, 0x0}}], 0x1, 0x2400c800) 05:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 177.187491][T12425] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8906, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xafdeb9974d1dcda7}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x108, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x31}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3, 0x5]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x80, 0x6, 0x6, 0xdffb, 0x10001, 0x6]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x101, 0x5f6, 0xc4fa, 0x6]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ed}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x68ae3f08, 0x7f, 0x44, 0x69, 0x1, 0x1f, 0x5, 0x0, 0xcd, [0x0, 0xb57, 0x2, 0x2, 0xda, 0xfffffffe, 0x6, 0x5], [0x100, 0x80000001, 0x8]}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000003500)={&(0x7f0000002f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003000)=""/69, 0x45}, {&(0x7f0000003080)=""/163, 0xa3}, {&(0x7f00000031c0)=""/255, 0xff}, {&(0x7f0000003140)=""/44, 0x2c}, {&(0x7f00000032c0)=""/154, 0x9a}, {&(0x7f0000003380)=""/108, 0x6c}, {&(0x7f0000003400)=""/66, 0x42}], 0x7}, 0x10040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', r4, 0x29, 0x40, 0x1, 0x6af5, 0x40, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x700, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7d, 0x0, 0x62, 0x7, 0x15, @private2, @loopback, 0x1, 0x8, 0x3, 0xfffffff8}}) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x11) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x274, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3fffc0}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x0, 0x48, 0x81, 0x8}, {0x6, 0x3f, 0x8, 0x7}, {0x2, 0x20, 0x5, 0x8}, {0xffff, 0x0, 0x5, 0x3ff}, {0xfff, 0x5, 0x0, 0xad}, {0x3, 0x81, 0x6, 0x400}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 05:36:53 executing program 3: bpf$ITER_CREATE(0x2, 0x0, 0x0) 05:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000"], 0x44}}, 0x0) 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 05:36:53 executing program 3: socket(0x11, 0x2, 0x0) socket(0x11, 0x2, 0x0) [ 177.283004][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 177.313178][T12439] device bond7 entered promiscuous mode 05:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000"], 0x44}}, 0x0) 05:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 177.344283][T12439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 177.358744][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe000000000000001400050000000000"], 0x44}}, 0x0) 05:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 177.400146][T12486] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 05:36:53 executing program 3: unshare(0x12000080) 05:36:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8906, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xafdeb9974d1dcda7}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x108, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x31}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3, 0x5]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x80, 0x6, 0x6, 0xdffb, 0x10001, 0x6]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x101, 0x5f6, 0xc4fa, 0x6]}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ed}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x68ae3f08, 0x7f, 0x44, 0x69, 0x1, 0x1f, 0x5, 0x0, 0xcd, [0x0, 0xb57, 0x2, 0x2, 0xda, 0xfffffffe, 0x6, 0x5], [0x100, 0x80000001, 0x8]}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000003500)={&(0x7f0000002f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003000)=""/69, 0x45}, {&(0x7f0000003080)=""/163, 0xa3}, {&(0x7f00000031c0)=""/255, 0xff}, {&(0x7f0000003140)=""/44, 0x2c}, {&(0x7f00000032c0)=""/154, 0x9a}, {&(0x7f0000003380)=""/108, 0x6c}, {&(0x7f0000003400)=""/66, 0x42}], 0x7}, 0x10040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', r4, 0x29, 0x40, 0x1, 0x6af5, 0x40, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x700, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7d, 0x0, 0x62, 0x7, 0x15, @private2, @loopback, 0x1, 0x8, 0x3, 0xfffffff8}}) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x11) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x274, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3fffc0}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x0, 0x48, 0x81, 0x8}, {0x6, 0x3f, 0x8, 0x7}, {0x2, 0x20, 0x5, 0x8}, {0xffff, 0x0, 0x5, 0x3ff}, {0xfff, 0x5, 0x0, 0xad}, {0x3, 0x81, 0x6, 0x400}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) [ 177.467057][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 177.486046][T12492] device bond8 entered promiscuous mode 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:36:53 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) [ 177.526996][T12492] 8021q: adding VLAN 0 to HW filter on device bond8 [ 177.539320][T12530] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 05:36:53 executing program 1: r0 = socket(0x23, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89ee, 0x0) 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/42], 0x44}}, 0x0) 05:36:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x168, 0x111, 0xb000012, 0x280, 0x7602, 0x280, 0x278, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'team_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz0\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@set2={{0x28, 'set\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 177.653324][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 177.689600][T12543] device bond9 entered promiscuous mode 05:36:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x301}, 0x14}}, 0x0) 05:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 177.717462][T12586] xt_nfacct: accounting object `syz0' does not exists [ 177.722659][T12543] 8021q: adding VLAN 0 to HW filter on device bond9 [ 177.738065][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/42], 0x44}}, 0x0) 05:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:53 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 05:36:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 05:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x301}, 0x14}}, 0x0) 05:36:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0) [ 177.873044][T12598] device bond10 entered promiscuous mode [ 177.889902][T12598] 8021q: adding VLAN 0 to HW filter on device bond10 05:36:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/236, 0xec}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/159, 0x9f}], 0x5, &(0x7f0000000480)=""/201, 0xc9}, 0x11000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', r2, 0x2f, 0xa1, 0x3, 0x8, 0x15, @loopback, @dev={0xfe, 0x80, [], 0x1f}, 0x10, 0x8, 0x2, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8903, 0x0) 05:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x301}, 0x14}}, 0x0) 05:36:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/42], 0x44}}, 0x0) 05:36:53 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000cc0)) 05:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:54 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000240)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, 0x0, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) 05:36:54 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x8914, 0x0) 05:36:54 executing program 3: bpf$ITER_CREATE(0x6, 0x0, 0x0) 05:36:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/45], 0x44}}, 0x0) 05:36:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x0, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:54 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ppoll(&(0x7f0000000140)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 05:36:54 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @broadcast}}}}}, 0x0) 05:36:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8981, &(0x7f0000000000)={'team0\x00', 0x0}) 05:36:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) 05:36:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/45], 0x44}}, 0x0) 05:36:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/45], 0x44}}, 0x0) 05:36:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) [ 178.294288][T12687] device bond11 entered promiscuous mode [ 178.303997][T12687] 8021q: adding VLAN 0 to HW filter on device bond11 05:36:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x0, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:54 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000600)={0x2, 0x0, @empty}, 0x10) 05:36:54 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x5}}, 0x1c) 05:36:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/47], 0x44}}, 0x0) 05:36:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x0, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) [ 178.405215][T12725] bond12 (uninitialized): Released all slaves 05:36:55 executing program 1: bpf$ITER_CREATE(0x12, 0x0, 0x0) 05:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r1, 0x0, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) 05:36:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004b80)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 05:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) 05:36:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/47], 0x44}}, 0x0) 05:36:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000fe0000000000000014000500"/47], 0x44}}, 0x0) 05:36:55 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x3, &(0x7f00000001c0)=0x9, 0x4) 05:36:55 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 179.179709][T12752] bond12 (uninitialized): Released all slaves 05:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x413, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 05:36:55 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) 05:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:55 executing program 2: 05:36:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x401, 0x4) 05:36:55 executing program 4: bpf$ITER_CREATE(0x23, 0x0, 0x0) 05:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x413, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 05:36:55 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x8953, 0x0) 05:36:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 05:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x413, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 179.343127][T12771] device bond12 entered promiscuous mode [ 179.373107][T12771] 8021q: adding VLAN 0 to HW filter on device bond12 05:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:55 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5452, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nl=@unspec, @l2}) 05:36:55 executing program 1: 05:36:55 executing program 1: 05:36:55 executing program 4: 05:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x18}}, 0x0) 05:36:55 executing program 2: 05:36:55 executing program 1: [ 179.541128][T12824] device bond13 entered promiscuous mode [ 179.562555][T12824] 8021q: adding VLAN 0 to HW filter on device bond13 05:36:55 executing program 3: 05:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x18}}, 0x0) 05:36:55 executing program 4: 05:36:55 executing program 2: 05:36:55 executing program 3: 05:36:55 executing program 1: 05:36:55 executing program 2: [ 179.768852][T12874] device bond14 entered promiscuous mode 05:36:55 executing program 3: 05:36:55 executing program 4: 05:36:55 executing program 3: [ 179.814574][T12874] 8021q: adding VLAN 0 to HW filter on device bond14 05:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x413, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x18}}, 0x0) 05:36:55 executing program 3: 05:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:55 executing program 1: 05:36:55 executing program 2: 05:36:55 executing program 4: 05:36:55 executing program 0: 05:36:55 executing program 1: 05:36:55 executing program 2: 05:36:55 executing program 3: [ 179.982607][T12925] bond15 (uninitialized): Released all slaves 05:36:55 executing program 4: 05:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:56 executing program 0: 05:36:56 executing program 1: 05:36:56 executing program 2: 05:36:56 executing program 3: 05:36:56 executing program 0: 05:36:56 executing program 4: [ 180.132544][T12937] bond15 (uninitialized): Released all slaves 05:36:56 executing program 3: 05:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:56 executing program 2: 05:36:56 executing program 1: 05:36:56 executing program 4: 05:36:56 executing program 0: 05:36:56 executing program 3: 05:36:56 executing program 2: [ 180.295175][T12949] bond15 (uninitialized): Released all slaves 05:36:56 executing program 1: 05:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:56 executing program 4: 05:36:56 executing program 0: 05:36:56 executing program 3: 05:36:56 executing program 2: 05:36:56 executing program 4: 05:36:56 executing program 1: 05:36:56 executing program 0: 05:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:56 executing program 3: 05:36:56 executing program 2: 05:36:56 executing program 4: 05:36:56 executing program 0: 05:36:56 executing program 1: bpf$ITER_CREATE(0xd, 0x0, 0x0) 05:36:56 executing program 3: 05:36:56 executing program 2: 05:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:56 executing program 4: 05:36:56 executing program 0: 05:36:56 executing program 3: 05:36:56 executing program 1: 05:36:56 executing program 4: 05:36:56 executing program 2: 05:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:56 executing program 0: 05:36:56 executing program 3: 05:36:56 executing program 1: 05:36:56 executing program 4: 05:36:56 executing program 2: 05:36:56 executing program 0: 05:36:56 executing program 1: 05:36:56 executing program 3: [ 180.888737][T12989] device bond15 entered promiscuous mode [ 180.927341][T12989] 8021q: adding VLAN 0 to HW filter on device bond15 05:36:56 executing program 4: 05:36:56 executing program 3: 05:36:57 executing program 2: 05:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:57 executing program 0: 05:36:57 executing program 1: 05:36:57 executing program 4: 05:36:57 executing program 0: 05:36:57 executing program 3: 05:36:57 executing program 2: 05:36:57 executing program 4: 05:36:57 executing program 1: 05:36:57 executing program 3: 05:36:57 executing program 2: [ 181.213736][T13042] device bond16 entered promiscuous mode [ 181.224063][T13042] 8021q: adding VLAN 0 to HW filter on device bond16 05:36:57 executing program 1: 05:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:36:57 executing program 0: 05:36:57 executing program 4: 05:36:57 executing program 3: 05:36:57 executing program 4: 05:36:57 executing program 2: 05:36:57 executing program 1: 05:36:57 executing program 0: [ 181.368719][T13089] device bond17 entered promiscuous mode 05:36:57 executing program 4: 05:36:57 executing program 0: 05:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:57 executing program 3: 05:36:57 executing program 1: [ 181.454631][T13089] 8021q: adding VLAN 0 to HW filter on device bond17 05:36:57 executing program 0: 05:36:57 executing program 2: 05:36:57 executing program 3: 05:36:57 executing program 0: 05:36:57 executing program 4: 05:36:57 executing program 1: 05:36:57 executing program 2: 05:36:57 executing program 4: 05:36:57 executing program 3: [ 181.641612][T13136] bond18 (uninitialized): Released all slaves 05:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:57 executing program 0: 05:36:57 executing program 1: 05:36:57 executing program 2: 05:36:57 executing program 4: 05:36:57 executing program 3: 05:36:57 executing program 1: 05:36:57 executing program 0: [ 181.788340][T13150] bond18 (uninitialized): Released all slaves 05:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:57 executing program 4: 05:36:57 executing program 2: 05:36:57 executing program 3: 05:36:57 executing program 1: 05:36:57 executing program 4: 05:36:57 executing program 0: 05:36:57 executing program 3: 05:36:57 executing program 2: [ 181.970340][T13163] bond18 (uninitialized): Released all slaves 05:36:57 executing program 1: 05:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:58 executing program 3: 05:36:58 executing program 2: 05:36:58 executing program 0: 05:36:58 executing program 4: 05:36:58 executing program 1: [ 182.093218][T13175] __nla_validate_parse: 24 callbacks suppressed [ 182.093226][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:58 executing program 3: 05:36:58 executing program 2: 05:36:58 executing program 0: 05:36:58 executing program 4: 05:36:58 executing program 1: 05:36:58 executing program 3: [ 182.198628][T13175] bond18 (uninitialized): Released all slaves 05:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:58 executing program 0: 05:36:58 executing program 2: 05:36:58 executing program 4: 05:36:58 executing program 1: 05:36:58 executing program 3: 05:36:58 executing program 0: [ 182.353182][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:58 executing program 2: 05:36:58 executing program 4: 05:36:58 executing program 1: [ 182.403626][T13195] bond18 (uninitialized): Released all slaves 05:36:58 executing program 3: 05:36:58 executing program 0: 05:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:36:58 executing program 2: 05:36:58 executing program 4: 05:36:58 executing program 1: 05:36:58 executing program 3: 05:36:58 executing program 0: [ 182.561114][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:58 executing program 2: 05:36:58 executing program 4: 05:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 182.611145][T13210] bond18 (uninitialized): Released all slaves 05:36:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) dup3(r0, r1, 0x0) 05:36:58 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000402505a8a440000102030109021b5b69"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 05:36:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x5, 0x8, 0x0, 0x1, '\x00'}]}, 0x24}}, 0x0) 05:36:58 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 05:36:58 executing program 0: prctl$PR_SET_MM_AUXV(0x53564d41, 0xc, &(0x7f0000000100), 0x0) 05:36:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4e, 0x0, 0x0) [ 182.739221][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:36:58 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x8, &(0x7f0000000300)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 05:36:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x160, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ipv6={@loopback, @private1, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x200003f8) 05:36:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "ed2c276c606816a53a5743db7271198d8bceaa0d01d77a574f92f9adaa06d692955854a1115b7c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 182.793853][T13226] device bond18 entered promiscuous mode [ 182.832549][T13226] 8021q: adding VLAN 0 to HW filter on device bond18 05:36:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x140, 0x338, 0x408, 0x238, 0x338, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@remote, @local, [], [], 'rose0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@dev}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@ipv6={@mcast1, @empty, [], [], 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 05:36:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x800, 0x802) writev(r0, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f0000000580)="10", 0x1}], 0x3) [ 182.878768][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 182.895101][T13279] device bond19 entered promiscuous mode [ 182.916651][T13279] 8021q: adding VLAN 0 to HW filter on device bond19 05:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 183.016587][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 183.026149][T10034] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 183.037567][T13323] device bond20 entered promiscuous mode [ 183.049797][T13323] 8021q: adding VLAN 0 to HW filter on device bond20 [ 183.080385][ T9944] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 183.200379][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 183.460369][T10034] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.471114][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 183.530377][ T9944] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 183.581263][T10034] usb 4-1: config index 0 descriptor too short (expected 23323, got 27) [ 183.589734][T10034] usb 4-1: config 0 has too many interfaces: 105, using maximum allowed: 32 [ 183.599315][T10034] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.610090][T10034] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 105 [ 183.630382][ T32] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 183.641309][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.652962][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.663574][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 183.676907][ T32] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 183.686297][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.697044][ T32] usb 1-1: config 0 descriptor?? [ 183.701970][ T9944] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 183.720099][ T9944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.732919][ T9944] usb 3-1: Product: syz [ 183.737195][ T9944] usb 3-1: Manufacturer: syz [ 183.741859][ T9944] usb 3-1: SerialNumber: syz [ 183.780458][T10034] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 183.789646][T10034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.798688][T10034] usb 4-1: Product: syz [ 183.803072][T10034] usb 4-1: Manufacturer: syz [ 183.807661][T10034] usb 4-1: SerialNumber: syz [ 183.813355][T10034] usb 4-1: config 0 descriptor?? [ 183.982027][ T9944] usb 3-1: USB disconnect, device number 4 [ 184.053509][ T3979] usb 4-1: USB disconnect, device number 2 [ 184.181043][ T32] koneplus 0003:1E7D:2E22.0001: unknown global tag 0xd [ 184.187935][ T32] koneplus 0003:1E7D:2E22.0001: item 0 4 1 13 parsing failed [ 184.195623][ T32] koneplus 0003:1E7D:2E22.0001: parse failed [ 184.201971][ T32] koneplus: probe of 0003:1E7D:2E22.0001 failed with error -22 [ 184.383389][ T5082] usb 1-1: USB disconnect, device number 2 [ 184.750357][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.820326][T10034] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.150420][ T9944] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 185.200364][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 185.230372][T10034] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.321087][T10034] usb 4-1: config index 0 descriptor too short (expected 23323, got 27) [ 185.329511][T10034] usb 4-1: config 0 has too many interfaces: 105, using maximum allowed: 32 [ 185.338463][T10034] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.348649][T10034] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 105 [ 185.380416][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 185.389590][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.390340][ T9944] usb 1-1: Using ep0 maxpacket: 32 [ 185.398950][ T32] usb 3-1: Product: syz [ 185.407002][ T32] usb 3-1: Manufacturer: syz [ 185.411693][ T32] usb 3-1: SerialNumber: syz [ 185.520384][ T9944] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 185.520439][T10034] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 185.533717][ T9944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.540733][T10034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.554226][ T9944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.559214][T10034] usb 4-1: Product: syz [ 185.569849][ T9944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 185.573164][T10034] usb 4-1: Manufacturer: syz [ 185.588805][ T9944] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 185.590922][T10034] usb 4-1: SerialNumber: syz [ 185.602296][ T9944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.607059][T10034] usb 4-1: config 0 descriptor?? [ 185.622136][ T9944] usb 1-1: config 0 descriptor?? [ 185.660414][T10034] usb 3-1: USB disconnect, device number 5 05:37:01 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x30, 0x0, 0x0) 05:37:01 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x84013, r0, 0x0) 05:37:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 05:37:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x3e, 0x0, 0x0) [ 185.700828][ T3960] usb 4-1: USB disconnect, device number 3 05:37:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x2}}, 0x1c}}, 0x0) 05:37:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 185.756580][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 185.833430][T13437] device bond21 entered promiscuous mode [ 185.846737][T13437] 8021q: adding VLAN 0 to HW filter on device bond21 05:37:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "ed2c276c606816a53a5743db7271198d8bceaa0d01d77a574f92f9adaa06d692955854a1115b7c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:37:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @empty}}) 05:37:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) 05:37:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x12, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) [ 185.949065][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.970329][ T9944] usbhid 1-1:0.0: can't add hid device: -71 [ 185.976465][ T9944] usbhid: probe of 1-1:0.0 failed with error -71 05:37:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@ipv4={[], [], @multicast1}, @mcast1, @loopback}) 05:37:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0xc020660b, 0x0) 05:37:01 executing program 1: prctl$PR_SET_MM_AUXV(0x23, 0xe, 0x0, 0x0) 05:37:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 185.994282][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 186.005369][ T9944] usb 1-1: USB disconnect, device number 3 [ 186.056321][T13496] device bond22 entered promiscuous mode [ 186.070602][T13496] 8021q: adding VLAN 0 to HW filter on device bond22 05:37:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@ipv4={[], [], @multicast1}, @mcast1, @loopback}) [ 186.189103][ T28] audit: type=1804 audit(1602394622.114:7): pid=13548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480383607/syzkaller.M3hd8F/178/bus" dev="sda1" ino=16107 res=1 errno=0 [ 186.242113][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 186.282320][T13551] device bond23 entered promiscuous mode [ 186.289764][T13551] 8021q: adding VLAN 0 to HW filter on device bond23 [ 186.360340][ T9944] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 186.600349][ T9944] usb 1-1: Using ep0 maxpacket: 32 [ 186.720396][ T9944] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 186.731520][ T9944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.742681][ T9944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.752731][ T9944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 186.766156][ T9944] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 186.775623][ T9944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.785248][ T9944] usb 1-1: config 0 descriptor?? [ 186.926286][ T28] audit: type=1804 audit(1602394622.854:8): pid=13599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480383607/syzkaller.M3hd8F/178/bus" dev="sda1" ino=16107 res=1 errno=0 [ 187.260977][ T9944] koneplus 0003:1E7D:2E22.0002: unknown global tag 0xd [ 187.267933][ T9944] koneplus 0003:1E7D:2E22.0002: item 0 4 1 13 parsing failed [ 187.275478][ T9944] koneplus 0003:1E7D:2E22.0002: parse failed [ 187.282742][ T9944] koneplus: probe of 0003:1E7D:2E22.0002 failed with error -22 [ 187.476102][ T5082] usb 1-1: USB disconnect, device number 4 05:37:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "ed2c276c606816a53a5743db7271198d8bceaa0d01d77a574f92f9adaa06d692955854a1115b7c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:37:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1c}, {0x6}]}) 05:37:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 05:37:03 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000180)=""/173, 0x32, 0xad, 0xffffffff}, 0x20) 05:37:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:37:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 188.050974][ T28] audit: type=1326 audit(1602394623.984:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13615 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0 [ 188.064505][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @l2tp={0x2, 0x0, @dev}, @hci}) [ 188.100182][T13623] device bond24 entered promiscuous mode [ 188.115115][ T28] audit: type=1804 audit(1602394624.044:10): pid=13653 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480383607/syzkaller.M3hd8F/179/bus" dev="sda1" ino=16140 res=1 errno=0 [ 188.128388][T13623] 8021q: adding VLAN 0 to HW filter on device bond24 [ 188.171993][ T28] audit: type=1804 audit(1602394624.094:11): pid=13666 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir427740921/syzkaller.JqpZCf/204/bus" dev="sda1" ino=16103 res=1 errno=0 05:37:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:04 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000002300)=""/188, 0x0, 0xbc, 0xffffffff}, 0x20) [ 188.320445][ T3960] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.391330][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:04 executing program 2: prctl$PR_SET_MM_AUXV(0x2, 0x747000, 0x0, 0x0) 05:37:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 188.431584][T13678] device bond25 entered promiscuous mode [ 188.450236][T13678] 8021q: adding VLAN 0 to HW filter on device bond25 [ 188.509104][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 188.527088][T13718] device bond26 entered promiscuous mode [ 188.539417][T13718] 8021q: adding VLAN 0 to HW filter on device bond26 [ 188.580619][ T3960] usb 1-1: Using ep0 maxpacket: 32 [ 188.730422][ T3960] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 188.730450][ T3960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.752721][ T3960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.762583][ T3960] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 188.775619][ T3960] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 188.785359][ T3960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.795782][ T3960] usb 1-1: config 0 descriptor?? [ 188.848158][ T28] audit: type=1326 audit(1602394624.774:12): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13615 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0 [ 189.300940][ T3960] koneplus 0003:1E7D:2E22.0003: unknown global tag 0xd [ 189.307852][ T3960] koneplus 0003:1E7D:2E22.0003: item 0 4 1 13 parsing failed [ 189.325419][ T3960] koneplus 0003:1E7D:2E22.0003: parse failed [ 189.334891][ T3960] koneplus: probe of 0003:1E7D:2E22.0003 failed with error -22 [ 189.505830][ T3960] usb 1-1: USB disconnect, device number 5 05:37:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3d, 0x0, &(0x7f0000000540)) 05:37:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000180)=""/173, 0x2e, 0xad, 0xffffffff}, 0x20) 05:37:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1c}, {0x6}]}) 05:37:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:37:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 190.043720][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 190.059808][ T28] audit: type=1326 audit(1602394625.984:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13782 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0 [ 190.060605][T13780] bond27 (uninitialized): Released all slaves 05:37:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2}]}) [ 190.149184][ T28] audit: type=1804 audit(1602394626.074:14): pid=13792 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480383607/syzkaller.M3hd8F/180/bus" dev="sda1" ino=16142 res=1 errno=0 [ 190.174553][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1, 0x0, 0x0, 0x8}]}, {0x0, [0x5f]}}, &(0x7f0000000180)=""/173, 0x27, 0xad, 0xffffffff}, 0x20) [ 190.209395][ T28] audit: type=1804 audit(1602394626.114:15): pid=13793 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir427740921/syzkaller.JqpZCf/205/bus" dev="sda1" ino=16143 res=1 errno=0 [ 190.240068][T13796] bond27 (uninitialized): Released all slaves [ 190.270063][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:06 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000001500)) 05:37:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f0000000040)={'wlan1\x00'}) [ 190.443159][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f0000000040)={'wlan1\x00'}) [ 190.523385][T13810] bond27 (uninitialized): Released all slaves 05:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) [ 190.647563][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 190.658854][T13822] bond27 (uninitialized): Released all slaves 05:37:06 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 05:37:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @multicast2}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_ENCAP_TYPE={0x6}]}, 0x34}}, 0x0) 05:37:06 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000040), &(0x7f0000000080), 0x8) 05:37:06 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000001500)) 05:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) 05:37:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:37:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x401070c9, 0x0) 05:37:06 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/218, 0xda}}, 0x120) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)='\b\x00\x00\x00', 0x4}], 0x1) [ 191.014000][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 191.045987][T13836] bond27 (uninitialized): Released all slaves 05:37:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) [ 191.081383][ T28] audit: type=1804 audit(1602394627.014:16): pid=13845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480383607/syzkaller.M3hd8F/181/bus" dev="sda1" ino=16155 res=1 errno=0 05:37:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:07 executing program 2: io_setup(0x3, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000001500)) io_setup(0x7, &(0x7f0000000100)) 05:37:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, 0x0, &(0x7f0000000540)) [ 191.132287][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.140101][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.208862][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 191.211050][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.236852][T13854] bond27 (uninitialized): Released all slaves 05:37:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, 0x0, &(0x7f0000000540)) [ 191.260879][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.280084][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.300097][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:37:07 executing program 2: prctl$PR_SET_MM_AUXV(0x29, 0xc, &(0x7f0000000100), 0x0) [ 191.348638][ T28] audit: type=1804 audit(1602394627.274:17): pid=13863 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/201/bus" dev="sda1" ino=16131 res=1 errno=0 [ 191.359105][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.418639][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.420207][T13866] bond27 (uninitialized): Released all slaves [ 191.449756][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:37:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 05:37:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 191.483455][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.516618][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.550729][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.597077][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.617332][T13877] bond27 (uninitialized): Released all slaves [ 191.625294][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.656371][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.685201][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.714922][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.739486][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.749957][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.757950][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.766086][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.774435][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.782350][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.790081][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.800098][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.808747][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.854762][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.866893][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.876401][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.884223][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.894800][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 05:37:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x23, &(0x7f0000000040), 0x4) 05:37:07 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_setup(0x7a81, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x8000}, 0x0) [ 191.902568][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.913099][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.920853][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.938409][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.946167][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.959073][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.967098][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.976571][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.984210][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 191.998470][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.006018][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.015341][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.039561][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.047111][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.057190][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.064991][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.074489][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.082540][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.095126][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.102584][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.109976][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.131955][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.140500][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.147902][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.156949][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.165497][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.174314][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.181780][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.189161][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.216480][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.226847][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.235717][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.243243][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.252531][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.260595][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.268046][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.277394][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.284977][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.293998][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.301489][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.309834][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.318703][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.327108][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.335874][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.343333][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.352222][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.359590][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.367212][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.374631][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.382092][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.389464][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.396890][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.404288][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.411721][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.419087][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.426496][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.433915][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.441384][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.448764][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.456170][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.463591][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.471258][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.478697][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.486142][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.493557][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.500987][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.508355][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.515781][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.523208][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.530713][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.538083][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.545505][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.552927][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.560370][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.567905][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.575340][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.582748][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.590157][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.597664][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.605083][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.612502][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.619882][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.627284][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.634696][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.642159][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.649525][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.656918][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.664348][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.671999][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.679389][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.686811][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.694217][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.701696][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.709060][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.716630][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.724285][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.731734][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.739138][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.746657][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.754136][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.761545][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.768924][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.776604][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.784006][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.791416][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.798801][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.806191][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.813661][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.821071][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.828446][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.835897][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.843375][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.850793][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.858237][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.865743][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.873198][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.880852][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.888239][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.895673][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.903116][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.910532][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.917909][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.925429][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.932889][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.940350][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.947753][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.955196][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.962616][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.970040][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.977656][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.985072][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.992580][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 192.999958][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.007396][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.014887][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.022293][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.029702][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.037242][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.044661][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.052075][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.059456][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.066899][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.074312][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.081922][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.089325][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.096738][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.104132][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.111575][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.118945][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.126362][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.133779][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.141191][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.148580][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.156083][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.163531][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.170946][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.178311][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.185911][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.193475][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.201435][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.208812][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.216245][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.223671][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.231128][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.238553][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.246126][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.253546][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.260964][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.268336][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.275845][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.283266][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.290915][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.298307][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.305740][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.313170][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.320593][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.327966][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.335421][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.342840][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.350210][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.357775][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.365203][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.372649][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.380063][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.387666][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.395159][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.402625][ T5082] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 193.410306][ T5082] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 193.427582][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.435822][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.445453][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.453058][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.462120][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.469510][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.477075][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.485791][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.493432][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.500897][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.508267][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.515761][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.523205][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.530668][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.538299][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.545754][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.553186][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.560654][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.568126][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.575676][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.583160][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.590806][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.598181][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.607929][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.615377][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.622902][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.630367][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.637820][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.645254][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.653544][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.660978][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.668346][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.675857][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.683264][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.690793][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.698966][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.706401][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.713847][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.721538][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.729884][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.737320][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.745156][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.754294][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.761749][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.769214][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.776697][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.784265][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.791825][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.799759][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.807181][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.814602][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.822086][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.830883][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.839562][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.847317][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.855375][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.862923][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.870899][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.878865][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.886509][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.893930][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.901533][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.908924][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.916528][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.923966][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.931383][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.938772][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.946186][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.953610][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.961049][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.968436][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.975861][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.983276][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.990856][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 193.998248][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.005876][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.013296][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.020744][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.029695][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.037115][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.044614][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.052049][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.059440][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.066892][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.074351][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.081883][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.089255][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.096783][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.104380][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.112552][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.119917][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.127421][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.134831][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.142249][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.149722][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.157163][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.164579][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.171990][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.179383][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.186808][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.194224][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.201925][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.209562][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.216986][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.224420][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.232396][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.239794][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.247234][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.254650][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.262082][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.269496][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.276921][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.284334][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.291787][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.299165][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.306569][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.315057][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.322531][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.330471][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.338183][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.345590][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.353088][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.360495][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.367878][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.375287][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.382788][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.390157][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.397570][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.404982][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.412644][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.420134][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.427542][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.435003][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.442444][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.449819][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.457219][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.465249][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.472703][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.480075][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.487478][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.494885][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.502375][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.509841][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.517444][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.524993][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.532513][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.539903][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.547341][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.554750][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.562152][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.569545][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.576943][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.584466][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.591906][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.599364][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.606902][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.614364][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.622010][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.629471][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.637040][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.644451][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.651874][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.659273][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.666684][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.674161][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.683144][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.690560][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.698010][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.705476][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.713531][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.721178][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.728639][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.736468][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.743988][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.751515][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.758936][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.766386][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.773911][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.781346][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.788965][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.796463][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.803933][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.811500][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.818857][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.826590][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.834046][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.841485][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.849000][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.856422][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.863830][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.871343][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.878737][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.886160][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.893612][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.901010][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.908389][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.915927][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.923549][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.930991][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.938484][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.945888][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.953402][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.960824][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.968203][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.975613][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.983062][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.990483][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.997949][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.005351][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.012763][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.020141][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.027802][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.035282][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.042699][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.050097][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.057510][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.064931][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.072354][T10034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 05:37:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') read$char_raw(r0, 0x0, 0x0) 05:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x13, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}}, 0x1c}}, 0x0) 05:37:11 executing program 2: io_setup(0x10000, &(0x7f0000000000)) 05:37:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) [ 195.079968][T10034] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 05:37:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x13, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}}, 0x1c}}, 0x0) 05:37:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 195.164406][T13918] __nla_validate_parse: 2 callbacks suppressed [ 195.164415][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 195.191240][T13918] bond27 (uninitialized): Released all slaves 05:37:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) [ 195.267500][ T28] audit: type=1804 audit(1602394631.194:18): pid=13937 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/199/bus" dev="sda1" ino=16164 res=1 errno=0 [ 195.349550][ T28] audit: type=1804 audit(1602394631.244:19): pid=13939 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/202/bus" dev="sda1" ino=16177 res=1 errno=0 [ 195.385057][ T28] audit: type=1804 audit(1602394631.274:20): pid=13946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480383607/syzkaller.M3hd8F/185/bus" dev="sda1" ino=16179 res=1 errno=0 [ 195.411772][ T28] audit: type=1804 audit(1602394631.314:21): pid=13947 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir427740921/syzkaller.JqpZCf/211/bus" dev="sda1" ino=16180 res=1 errno=0 05:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) [ 195.728671][ T28] audit: type=1804 audit(1602394631.404:22): pid=13954 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir509998995/syzkaller.1mFArq/214/bus" dev="sda1" ino=16181 res=1 errno=0 05:37:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:37:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2, 0x1}]}]}}, &(0x7f0000000180)=""/173, 0x3e, 0xad, 0xffffffff}, 0x20) 05:37:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x41, 0x0, 0x0) 05:37:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @struct]}}, &(0x7f0000000180)=""/173, 0x32, 0xad, 0xffffffff}, 0x20) [ 196.231307][ T28] audit: type=1804 audit(1602394632.164:23): pid=13973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/200/bus" dev="sda1" ino=16175 res=1 errno=0 05:37:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000002800)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, 0x0, r0, 0x0}]) [ 196.367831][ T28] audit: type=1804 audit(1602394632.214:24): pid=13980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir427740921/syzkaller.JqpZCf/212/bus" dev="sda1" ino=16171 res=1 errno=0 05:37:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x800, 0x802) writev(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)="c8", 0x1}, {0x0}, {&(0x7f0000000580)="10", 0x1}], 0x3) [ 196.627921][ T28] audit: type=1804 audit(1602394632.354:25): pid=13992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/203/bus" dev="sda1" ino=16182 res=1 errno=0 05:37:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000002800)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, 0x0, r0, 0x0}]) 05:37:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @loopback}, @l2tp={0x2, 0x0, @local}, @sco={0x1f, @none}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16f, 0x48, 0xe9}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/66) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/17) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="c3d200"/16, @ANYBLOB="47379a7e85d64a7f3e32d051287dedce12dcb08b58f2b1f8a47c3329802397ca36a5f56be8515c6d407f70b3643d6f62356214bcdb12b0bc8175225fe5ad41769d3b0800120eeeefd16f9beae729b2da3e59660be27444476b58bf30a8513a56dc529a1649ddeab6bb23a7d71b2c42ca3baf091dbedf4e80a599d8811bf0877d553c1c94db7e62749a6d2c9dfef3dd8e356cb3c13efbb978d70bd5a1713368574d0d8e0966", @ANYBLOB="04000000000000010000fffe", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x660c, 0x0) 05:37:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x8}]}}, &(0x7f0000000180)=""/173, 0x26, 0xad, 0xffffffff}, 0x20) 05:37:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @loopback}, @l2tp={0x2, 0x0, @local}, @sco={0x1f, @none}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16f, 0x48, 0xe9}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/66) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/17) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="c3d200"/16, @ANYBLOB="47379a7e85d64a7f3e32d051287dedce12dcb08b58f2b1f8a47c3329802397ca36a5f56be8515c6d407f70b3643d6f62356214bcdb12b0bc8175225fe5ad41769d3b0800120eeeefd16f9beae729b2da3e59660be27444476b58bf30a8513a56dc529a1649ddeab6bb23a7d71b2c42ca3baf091dbedf4e80a599d8811bf0877d553c1c94db7e62749a6d2c9dfef3dd8e356cb3c13efbb978d70bd5a1713368574d0d8e0966", @ANYBLOB="04000000000000010000fffe", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x660c, 0x0) 05:37:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) 05:37:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x20, 0x0, &(0x7f0000000200)=[@increfs_done, @dead_binder_done], 0x0, 0x0, 0x0}) 05:37:13 executing program 1: prctl$PR_SET_MM_AUXV(0x4, 0xc, 0x0, 0x0) 05:37:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/173, 0x1a, 0xad, 0xffffffff}, 0x20) 05:37:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') read$char_raw(r0, 0x0, 0x0) [ 197.379061][ T28] audit: type=1804 audit(1602394633.304:26): pid=14035 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/201/bus" dev="sda1" ino=16132 res=1 errno=0 05:37:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x21, 0x0, 0x0) [ 197.547146][ T28] audit: type=1804 audit(1602394633.344:27): pid=14040 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/204/bus" dev="sda1" ino=16185 res=1 errno=0 05:37:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) 05:37:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') read$char_raw(r0, 0x0, 0x0) 05:37:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00'}) 05:37:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') read$char_raw(r0, 0x0, 0x0) 05:37:14 executing program 1: futex(0x0, 0x8c, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0) 05:37:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x35}, 0x14}}, 0x0) 05:37:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) [ 198.396146][ T28] audit: type=1804 audit(1602394634.324:28): pid=14082 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/205/bus" dev="sda1" ino=16193 res=1 errno=0 [ 198.475082][ T28] audit: type=1804 audit(1602394634.354:29): pid=14083 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/202/bus" dev="sda1" ino=16194 res=1 errno=0 05:37:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) 05:37:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x160, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ipv6={@loopback, @private1, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x200003f8) 05:37:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:15 executing program 3: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="e3099c74b62bf1bed7f2e5c81e6e", 0xfffffffffffffe9a) 05:37:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8994, &(0x7f0000000040)={'wlan1\x00'}) 05:37:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:15 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') read$char_raw(r0, 0x0, 0x0) 05:37:15 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) 05:37:15 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x6609, 0x0) [ 199.361005][ T28] audit: type=1804 audit(1602394635.294:30): pid=14118 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/203/bus" dev="sda1" ino=16209 res=1 errno=0 [ 199.442770][ T28] audit: type=1804 audit(1602394635.374:31): pid=14123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/206/bus" dev="sda1" ino=16193 res=1 errno=0 [ 199.493793][ T28] audit: type=1804 audit(1602394635.414:32): pid=14124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir427740921/syzkaller.JqpZCf/219/bus" dev="sda1" ino=16194 res=1 errno=0 05:37:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) 05:37:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f0000000000)={@ipv4={[], [], @empty}, 0x800}) 05:37:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) [ 200.161293][T14135] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x16, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) [ 200.234114][ T28] audit: type=1804 audit(1602394636.164:33): pid=14139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir427740921/syzkaller.JqpZCf/219/bus" dev="sda1" ino=16194 res=1 errno=0 05:37:16 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 200.279131][T14148] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 200.345913][T14159] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000100)=[@release, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0x0, 0x0, 0x0}) 05:37:16 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:17 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) 05:37:17 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000100)=[@release, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0x0, 0x0, 0x0}) 05:37:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 201.245606][T14182] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:17 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) 05:37:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 05:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 201.357422][T14201] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 201.423939][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 201.490392][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 201.490405][ T28] audit: type=1804 audit(1602394637.414:38): pid=14205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480383607/syzkaller.M3hd8F/202/bus" dev="sda1" ino=16216 res=1 errno=0 05:37:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c00"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 05:37:18 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) 05:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c00"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 05:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c00"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getstats={0x1c, 0x24, 0x1}, 0x1c}}, 0x0) 05:37:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 05:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c0001"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 202.332580][ T28] audit: type=1804 audit(1602394638.264:39): pid=14236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir427740921/syzkaller.JqpZCf/221/bus" dev="sda1" ino=16214 res=1 errno=0 [ 202.367183][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c0001"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 202.537375][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 05:37:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "ed2c276c606816a53a088057433f7271198dabceaa0d01d77a574f92f9000000887e3101751164"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:37:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c0001"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2c, 0x0, 0x0) 05:37:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 203.188262][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 05:37:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/tty/drivers\x00', 0x0, 0x0) write$tun(r0, 0x0, 0x0) 05:37:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) 05:37:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) [ 203.355740][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 203.400912][T10034] usb 4-1: new high-speed USB device number 4 using dummy_hcd 05:37:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv4_delroute={0x2c, 0x29, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @multicast1}, @RTA_DST={0x8, 0x1, @private}]}, 0x2c}}, 0x0) [ 203.660612][T10034] usb 4-1: Using ep0 maxpacket: 16 [ 203.810357][T10034] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 203.822008][T10034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.833322][T10034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.843298][T10034] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 203.856901][T10034] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 203.866104][T10034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.875528][T10034] usb 4-1: config 0 descriptor?? [ 204.370969][T10034] cypress 0003:04B4:DE61.0006: unknown global tag 0xd [ 204.377767][T10034] cypress 0003:04B4:DE61.0006: item 0 4 1 13 parsing failed [ 204.385113][T10034] cypress 0003:04B4:DE61.0006: parse failed [ 204.391106][T10034] cypress: probe of 0003:04B4:DE61.0006 failed with error -22 [ 204.572119][ T3979] usb 4-1: USB disconnect, device number 4 [ 205.350334][ T5082] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.600889][ T5082] usb 4-1: Using ep0 maxpacket: 16 [ 205.740786][ T5082] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 205.751640][ T5082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.763111][ T5082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.773361][ T5082] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 205.786900][ T5082] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 205.796318][ T5082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.806662][ T5082] usb 4-1: config 0 descriptor?? 05:37:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "ed2c276c606816a53a088057433f7271198dabceaa0d01d77a574f92f9000000887e3101751164"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:22 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) connect(r0, &(0x7f0000000000)=@qipcrtr, 0x80) 05:37:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "ed2c276c606816a53a088057433f7271198dabceaa0d01d77a574f92f9000000887e3101751164"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) [ 206.182185][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 206.200316][ T5082] usbhid 4-1:0.0: can't add hid device: -71 [ 206.206428][ T5082] usbhid: probe of 4-1:0.0 failed with error -71 05:37:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 206.238011][ T5082] usb 4-1: USB disconnect, device number 5 05:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) [ 206.275759][ T28] audit: type=1804 audit(1602394642.204:40): pid=14354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/211/bus" dev="sda1" ino=16252 res=1 errno=0 05:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) [ 206.336157][ T28] audit: type=1804 audit(1602394642.244:41): pid=14356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/208/bus" dev="sda1" ino=16241 res=1 errno=0 [ 206.344483][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) [ 206.510313][ T3960] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 206.620304][ T5082] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 206.760352][ T3960] usb 2-1: Using ep0 maxpacket: 16 [ 206.880316][ T5082] usb 4-1: Using ep0 maxpacket: 16 [ 206.880853][ T3960] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 206.896252][ T3960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.907745][ T3960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.917856][ T3960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 206.931267][ T3960] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 206.940707][ T3960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.955204][ T3960] usb 2-1: config 0 descriptor?? [ 207.040364][ T5082] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 207.052764][ T5082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.079942][ T5082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.092094][ T5082] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 207.105807][ T5082] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 207.120784][ T5082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.138352][ T5082] usb 4-1: config 0 descriptor?? [ 207.431141][ T3960] cypress 0003:04B4:DE61.0007: unknown global tag 0xd [ 207.437963][ T3960] cypress 0003:04B4:DE61.0007: item 0 4 1 13 parsing failed [ 207.455895][ T3960] cypress 0003:04B4:DE61.0007: parse failed [ 207.462011][ T3960] cypress: probe of 0003:04B4:DE61.0007 failed with error -22 [ 207.620861][ T5082] cypress 0003:04B4:DE61.0008: unknown global tag 0xd [ 207.627711][ T5082] cypress 0003:04B4:DE61.0008: item 0 4 1 13 parsing failed [ 207.646065][ T5082] cypress 0003:04B4:DE61.0008: parse failed [ 207.653852][ T5082] cypress: probe of 0003:04B4:DE61.0008 failed with error -22 [ 207.662684][ T5082] usb 2-1: USB disconnect, device number 2 [ 207.829475][T10034] usb 4-1: USB disconnect, device number 6 05:37:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1e, &(0x7f0000000040), 0x4) 05:37:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2}, {0x6}]}) 05:37:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:24 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, [0x0, 0x2]}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 05:37:24 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 05:37:24 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="020000000100000000000000040004000000000020000400", @ANYRES32, @ANYBLOB="100004000200000001"], 0x2c, 0x0) [ 208.389507][ T28] audit: type=1326 audit(1602394644.314:42): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14412 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0 [ 208.421020][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:24 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x40086602, 0x0) 05:37:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, 0x0, 0x0) [ 208.507075][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 208.536458][ T28] audit: type=1804 audit(1602394644.464:43): pid=14440 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/212/bus" dev="sda1" ino=16265 res=1 errno=0 05:37:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x26, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x21, &(0x7f0000000040), 0x4) [ 208.578020][ T28] audit: type=1804 audit(1602394644.464:44): pid=14438 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/209/bus" dev="sda1" ino=16263 res=1 errno=0 [ 208.627902][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:25 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0xc0506617, 0x0) [ 209.172141][ T28] audit: type=1326 audit(1602394645.104:45): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14412 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0 05:37:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x33, 0x0, &(0x7f0000000540)) 05:37:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x25, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 05:37:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x19, 0x0, 0x0) 05:37:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x25, 0x0, 0x2}, {}]}) 05:37:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x29, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) [ 209.348300][T14466] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1a, 0x0, &(0x7f0000000540)) 05:37:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:25 executing program 1: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 05:37:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) [ 209.475981][ T28] audit: type=1804 audit(1602394645.404:46): pid=14484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/213/bus" dev="sda1" ino=16211 res=1 errno=0 [ 209.528380][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 209.534062][ T28] audit: type=1804 audit(1602394645.434:47): pid=14485 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/210/bus" dev="sda1" ino=15762 res=1 errno=0 05:37:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:26 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x66, 0x89, 0x21, 0x8, 0xdf6, 0x56, 0x3824, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x50, 0x86, 0x9c, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x60}}, {{0x9, 0x5, 0xb, 0x0, 0x400}}]}}]}}]}}, 0x0) 05:37:26 executing program 2: io_setup(0x9, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000001500)=0x0) io_destroy(r0) io_destroy(r0) 05:37:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={[], [], @remote}, [], [], 'wlan1\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "8d2aaafaf1b672efe6b536c401c387f29cdf6868ae819b6f721381b3d42f"}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6gre0\x00', 'wg1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 05:37:26 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/173, 0x32, 0xad, 0xffffffff}, 0x20) [ 210.279600][T14502] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:26 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x2}, {0x3}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000180)=""/173, 0x4c, 0xad, 0xffffffff}, 0x20) [ 210.366527][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 210.378313][T14520] bond27 (uninitialized): Released all slaves [ 210.418654][ T28] audit: type=1804 audit(1602394646.344:48): pid=14523 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/214/bus" dev="sda1" ino=16278 res=1 errno=0 05:37:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) [ 210.477350][ T28] audit: type=1804 audit(1602394646.384:49): pid=14526 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/211/bus" dev="sda1" ino=15767 res=1 errno=0 05:37:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x105, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1, 0x10000}}}}, 0x30}}, 0x0) [ 210.563658][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 210.588334][T14532] bond27 (uninitialized): Released all slaves [ 210.596729][ T3960] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 210.840321][ T3960] usb 4-1: Using ep0 maxpacket: 8 [ 210.961030][ T3960] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 96 [ 210.971022][ T3960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 05:37:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) [ 211.140830][ T3960] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=38.24 [ 211.149889][ T3960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.158305][ T3960] usb 4-1: Product: syz [ 211.162622][ T3960] usb 4-1: Manufacturer: syz [ 211.167285][ T3960] usb 4-1: SerialNumber: syz [ 211.175683][ T3960] usb 4-1: config 0 descriptor?? [ 211.201493][T14503] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 211.317377][ T28] audit: type=1804 audit(1602394647.244:50): pid=14554 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/215/bus" dev="sda1" ino=15767 res=1 errno=0 [ 211.480432][ T3960] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 211.490651][ T3960] asix: probe of 4-1:0.0 failed with error -71 [ 211.500049][ T3960] usb 4-1: USB disconnect, device number 7 [ 212.230326][ T3960] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 212.470353][ T3960] usb 4-1: Using ep0 maxpacket: 8 [ 212.590403][ T3960] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 96 [ 212.600134][ T3960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 212.770641][ T3960] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=38.24 [ 212.779726][ T3960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.788344][ T3960] usb 4-1: Product: syz [ 212.792919][ T3960] usb 4-1: Manufacturer: syz [ 212.797507][ T3960] usb 4-1: SerialNumber: syz [ 212.804685][ T3960] usb 4-1: config 0 descriptor?? [ 212.821980][T14503] raw-gadget gadget: fail, usb_ep_enable returned -22 05:37:28 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x66, 0x89, 0x21, 0x8, 0xdf6, 0x56, 0x3824, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x50, 0x86, 0x9c, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x60}}, {{0x9, 0x5, 0xb, 0x0, 0x400}}]}}]}}]}}, 0x0) 05:37:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') read$char_raw(r0, 0x0, 0x0) 05:37:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:28 executing program 2: socket$inet6(0xa, 0x6, 0x0) 05:37:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:29 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x66, 0x89, 0x21, 0x8, 0xdf6, 0x56, 0x3824, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x50, 0x86, 0x9c, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x60}}, {{0x9, 0x5, 0xb, 0x0, 0x400}}]}}]}}]}}, 0x0) [ 213.068048][ T3960] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 213.098814][ T3960] asix: probe of 4-1:0.0 failed with error -71 05:37:29 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000402505a8a440000102030109021b5b69010000000904000000070100090501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 05:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 213.120204][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 213.137448][ T3960] usb 4-1: USB disconnect, device number 8 [ 213.159888][T14583] bond27 (uninitialized): Released all slaves [ 213.190729][ T28] audit: type=1804 audit(1602394649.114:51): pid=14595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/212/bus" dev="sda1" ino=16285 res=1 errno=0 05:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 213.440292][ T5082] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 213.501442][ T3979] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 213.508930][ T3960] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 213.690375][ T5082] usb 3-1: Using ep0 maxpacket: 8 [ 213.752118][ T3960] usb 4-1: Using ep0 maxpacket: 8 [ 213.841289][ T5082] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 96 [ 213.851445][ T5082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 213.870783][ T3960] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 96 [ 213.880681][ T3960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 213.910601][ T3979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 213.990944][ T3979] usb 2-1: config index 0 descriptor too short (expected 23323, got 27) [ 213.999309][ T3979] usb 2-1: config 1 has too many interfaces: 105, using maximum allowed: 32 [ 214.008893][ T3979] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 214.017920][ T3979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.028533][ T3979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 105 [ 214.040361][ T5082] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=38.24 [ 214.049405][ T5082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.050710][ T3960] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=38.24 [ 214.057718][ T5082] usb 3-1: Product: syz [ 214.069076][ T3960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.070866][ T5082] usb 3-1: Manufacturer: syz [ 214.082042][ T3960] usb 4-1: Product: syz [ 214.083543][ T5082] usb 3-1: SerialNumber: syz [ 214.088294][ T3960] usb 4-1: Manufacturer: syz [ 214.094734][ T5082] usb 3-1: config 0 descriptor?? [ 214.100081][ T3960] usb 4-1: SerialNumber: syz [ 214.107750][ T3960] usb 4-1: config 0 descriptor?? [ 214.120908][T14590] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 214.131427][T14580] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 214.190343][ T3979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 214.200124][ T3979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.208833][ T3979] usb 2-1: Product: syz [ 214.213234][ T3979] usb 2-1: Manufacturer: syz [ 214.217804][ T3979] usb 2-1: SerialNumber: syz [ 214.351091][ T5082] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 214.370147][ T5082] asix: probe of 3-1:0.0 failed with error -71 [ 214.372987][ T3960] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 214.379686][ T5082] usb 3-1: USB disconnect, device number 6 [ 214.408166][ T3960] asix: probe of 4-1:0.0 failed with error -71 [ 214.419894][ T3960] usb 4-1: USB disconnect, device number 9 [ 214.503377][ T3979] usb 2-1: USB disconnect, device number 3 05:37:30 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x66, 0x89, 0x21, 0x8, 0xdf6, 0x56, 0x3824, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x50, 0x86, 0x9c, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x60}}, {{0x9, 0x5, 0xb, 0x0, 0x400}}]}}]}}]}}, 0x0) 05:37:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv4_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0x2, 0x20}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_FLOW={0x8}, @RTA_PRIORITY={0x8}]}, 0x34}}, 0x0) 05:37:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x13, 0x0, &(0x7f0000000540)) 05:37:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 215.021946][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 215.021960][ T28] audit: type=1804 audit(1602394650.954:53): pid=14675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/213/bus" dev="sda1" ino=15841 res=1 errno=0 [ 215.060369][ T28] audit: type=1804 audit(1602394650.984:54): pid=14678 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/217/bus" dev="sda1" ino=15759 res=1 errno=0 [ 215.230315][ T3979] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 215.250348][ T5082] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 215.530290][ T5082] usb 4-1: Using ep0 maxpacket: 8 [ 215.630372][ T3979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.650757][ T5082] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 96 [ 215.660577][ T5082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 215.710565][ T3979] usb 2-1: config index 0 descriptor too short (expected 23323, got 27) [ 215.719376][ T3979] usb 2-1: config 1 has too many interfaces: 105, using maximum allowed: 32 [ 215.728802][ T3979] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 215.737851][ T3979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.748204][ T3979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 105 [ 215.892010][ T5082] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=38.24 [ 215.901220][ T5082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.909181][ T5082] usb 4-1: Product: syz [ 215.910333][ T3979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 215.913750][ T5082] usb 4-1: Manufacturer: syz [ 215.926901][ T3979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.927790][ T5082] usb 4-1: SerialNumber: syz [ 215.935789][ T3979] usb 2-1: Product: syz [ 215.941079][ T5082] usb 4-1: config 0 descriptor?? [ 215.950380][ T3979] usb 2-1: Manufacturer: syz [ 215.960622][ T3979] usb 2-1: SerialNumber: syz [ 215.976435][T14663] raw-gadget gadget: fail, usb_ep_enable returned -22 05:37:32 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000402505a8a440000102030109021b5b69010000000904000000070100090501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 05:37:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp\x00') read$char_raw(r0, 0x0, 0x0) 05:37:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) [ 216.210337][ T5082] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 216.227385][ T3979] usb 2-1: USB disconnect, device number 4 [ 216.239582][ T5082] asix: probe of 4-1:0.0 failed with error -71 [ 216.257062][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 216.272600][ T5082] usb 4-1: USB disconnect, device number 10 [ 216.367425][ T28] audit: type=1804 audit(1602394652.294:55): pid=14719 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/214/bus" dev="sda1" ino=15758 res=1 errno=0 [ 216.424726][ T28] audit: type=1804 audit(1602394652.324:56): pid=14725 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/218/bus" dev="sda1" ino=16290 res=1 errno=0 [ 216.650296][ T3979] usb 2-1: new high-speed USB device number 5 using dummy_hcd 05:37:32 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0xc020662a, 0x0) 05:37:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x22, &(0x7f0000000040), 0x4) 05:37:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x42, &(0x7f0000000040), 0x4) 05:37:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:32 executing program 3: [ 216.746142][T14730] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:32 executing program 2: [ 216.829321][T14738] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 217.050355][ T3979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.130560][ T3979] usb 2-1: config index 0 descriptor too short (expected 23323, got 27) [ 217.139001][ T3979] usb 2-1: config 1 has too many interfaces: 105, using maximum allowed: 32 [ 217.157052][ T3979] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 217.166215][ T3979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.176672][ T3979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 105 [ 217.340334][ T3979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 217.349556][ T3979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.357751][ T3979] usb 2-1: Product: syz [ 217.362156][ T3979] usb 2-1: Manufacturer: syz [ 217.366735][ T3979] usb 2-1: SerialNumber: syz [ 217.663479][ T3979] usb 2-1: USB disconnect, device number 5 05:37:34 executing program 1: 05:37:34 executing program 3: 05:37:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:34 executing program 2: 05:37:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:34 executing program 3: 05:37:34 executing program 2: 05:37:34 executing program 1: 05:37:34 executing program 3: [ 218.190325][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:34 executing program 2: 05:37:34 executing program 1: 05:37:34 executing program 3: [ 218.273683][ T28] audit: type=1804 audit(1602394654.204:57): pid=14772 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/215/bus" dev="sda1" ino=16322 res=1 errno=0 [ 218.327067][T14777] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:34 executing program 2: [ 218.361272][ T28] audit: type=1804 audit(1602394654.234:58): pid=14773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/219/bus" dev="sda1" ino=15760 res=1 errno=0 [ 218.441979][T14784] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:35 executing program 1: 05:37:35 executing program 3: 05:37:35 executing program 2: 05:37:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:35 executing program 2: 05:37:35 executing program 1: 05:37:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:35 executing program 3: [ 219.122717][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:35 executing program 1: 05:37:35 executing program 3: [ 219.224472][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 219.234417][ T28] audit: type=1804 audit(1602394655.164:59): pid=14808 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/216/bus" dev="sda1" ino=16342 res=1 errno=0 [ 219.303796][ T28] audit: type=1804 audit(1602394655.194:60): pid=14811 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/220/bus" dev="sda1" ino=16349 res=1 errno=0 05:37:35 executing program 3: 05:37:35 executing program 1: 05:37:35 executing program 2: 05:37:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:36 executing program 1: 05:37:36 executing program 2: 05:37:36 executing program 3: [ 220.055912][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:36 executing program 2: 05:37:36 executing program 1: 05:37:36 executing program 3: 05:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 220.165253][T14838] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:36 executing program 1: [ 220.204274][ T28] audit: type=1804 audit(1602394656.134:61): pid=14843 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/217/bus" dev="sda1" ino=16340 res=1 errno=0 [ 220.280171][T14847] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 220.291285][ T28] audit: type=1804 audit(1602394656.174:62): pid=14846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/221/bus" dev="sda1" ino=16359 res=1 errno=0 05:37:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:36 executing program 2: 05:37:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:36 executing program 3: 05:37:36 executing program 1: 05:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:36 executing program 2: 05:37:37 executing program 3: 05:37:37 executing program 1: [ 221.075431][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:37 executing program 2: 05:37:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 221.118541][ T28] audit: type=1804 audit(1602394657.044:63): pid=14869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/218/bus" dev="sda1" ino=16339 res=1 errno=0 05:37:37 executing program 3: [ 221.206297][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 221.233165][ T28] audit: type=1804 audit(1602394657.164:64): pid=14879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/222/bus" dev="sda1" ino=16368 res=1 errno=0 [ 221.288033][T14878] device bond27 entered promiscuous mode [ 221.298972][T14878] 8021q: adding VLAN 0 to HW filter on device bond27 05:37:37 executing program 3: 05:37:37 executing program 1: 05:37:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:37 executing program 2: 05:37:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:37 executing program 3: 05:37:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:37 executing program 1: 05:37:38 executing program 2: 05:37:38 executing program 3: 05:37:38 executing program 1: 05:37:38 executing program 2: 05:37:38 executing program 1: [ 222.109133][T14935] device bond28 entered promiscuous mode 05:37:38 executing program 1: [ 222.142784][ T28] audit: type=1804 audit(1602394658.074:65): pid=14976 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/219/bus" dev="sda1" ino=16340 res=1 errno=0 [ 222.172947][T14935] 8021q: adding VLAN 0 to HW filter on device bond28 [ 222.274323][ T28] audit: type=1804 audit(1602394658.204:66): pid=14981 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/223/bus" dev="sda1" ino=16334 res=1 errno=0 05:37:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:38 executing program 3: 05:37:38 executing program 1: 05:37:38 executing program 2: 05:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 222.998039][T14991] device bond29 entered promiscuous mode [ 223.011859][T14991] 8021q: adding VLAN 0 to HW filter on device bond29 05:37:39 executing program 1: 05:37:39 executing program 1: 05:37:39 executing program 3: 05:37:39 executing program 2: [ 223.067123][T15032] device bond30 entered promiscuous mode [ 223.074733][T15032] 8021q: adding VLAN 0 to HW filter on device bond30 05:37:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 223.138591][ T28] audit: type=1804 audit(1602394659.064:67): pid=15070 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/224/bus" dev="sda1" ino=16350 res=1 errno=0 [ 223.283118][T15077] __nla_validate_parse: 3 callbacks suppressed [ 223.283127][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 223.394859][ T28] audit: type=1804 audit(1602394659.104:68): pid=15071 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/220/bus" dev="sda1" ino=16351 res=1 errno=0 [ 223.580020][T15077] device bond31 entered promiscuous mode [ 223.603171][T15077] 8021q: adding VLAN 0 to HW filter on device bond31 05:37:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:40 executing program 2: 05:37:40 executing program 1: 05:37:40 executing program 3: 05:37:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:40 executing program 2: 05:37:40 executing program 1: 05:37:40 executing program 3: [ 224.172225][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 224.219031][T15125] device bond32 entered promiscuous mode [ 224.259535][ T28] audit: type=1804 audit(1602394660.184:69): pid=15164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/221/bus" dev="sda1" ino=16372 res=1 errno=0 [ 224.285452][T15125] 8021q: adding VLAN 0 to HW filter on device bond32 05:37:40 executing program 2: 05:37:40 executing program 1: 05:37:40 executing program 3: [ 225.102848][ T28] audit: type=1804 audit(1602394660.764:70): pid=15175 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/225/bus" dev="sda1" ino=16350 res=1 errno=0 05:37:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:41 executing program 2: 05:37:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:41 executing program 1: 05:37:41 executing program 3: [ 225.898116][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 225.935576][T15187] device bond33 entered promiscuous mode [ 225.946439][T15187] 8021q: adding VLAN 0 to HW filter on device bond33 05:37:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:41 executing program 1: 05:37:41 executing program 3: 05:37:41 executing program 2: 05:37:41 executing program 1: 05:37:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:42 executing program 2: [ 226.144648][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 226.216329][T15227] device bond34 entered promiscuous mode [ 226.240478][T15227] 8021q: adding VLAN 0 to HW filter on device bond34 [ 226.339930][ T28] audit: type=1804 audit(1602394662.264:71): pid=15275 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/222/bus" dev="sda1" ino=16377 res=1 errno=0 [ 227.201708][ T28] audit: type=1804 audit(1602394662.304:72): pid=15276 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/226/bus" dev="sda1" ino=16378 res=1 errno=0 05:37:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:43 executing program 1: 05:37:43 executing program 3: 05:37:43 executing program 2: 05:37:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:43 executing program 3: 05:37:43 executing program 2: 05:37:43 executing program 1: [ 228.002056][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:44 executing program 3: 05:37:44 executing program 2: [ 228.076465][T15285] device bond35 entered promiscuous mode [ 228.105665][T15285] 8021q: adding VLAN 0 to HW filter on device bond35 05:37:44 executing program 1: [ 228.361429][ T28] audit: type=1804 audit(1602394664.294:73): pid=15333 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/227/bus" dev="sda1" ino=15953 res=1 errno=0 [ 228.507958][ T28] audit: type=1804 audit(1602394664.434:74): pid=15342 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/223/bus" dev="sda1" ino=16375 res=1 errno=0 05:37:45 executing program 1: 05:37:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:45 executing program 3: 05:37:45 executing program 2: 05:37:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:45 executing program 1: 05:37:45 executing program 2: 05:37:45 executing program 1: 05:37:45 executing program 3: [ 229.606806][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:45 executing program 1: [ 229.687202][T15356] device bond36 entered promiscuous mode [ 229.696657][ T28] audit: type=1804 audit(1602394665.624:75): pid=15381 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/228/bus" dev="sda1" ino=15735 res=1 errno=0 [ 229.722536][T15356] 8021q: adding VLAN 0 to HW filter on device bond36 05:37:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:45 executing program 3: [ 229.795209][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 229.819590][T15399] device bond37 entered promiscuous mode [ 229.827294][T15399] 8021q: adding VLAN 0 to HW filter on device bond37 [ 230.141624][ T28] audit: type=1804 audit(1602394666.074:76): pid=15445 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/224/bus" dev="sda1" ino=16001 res=1 errno=0 05:37:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:46 executing program 2: 05:37:46 executing program 3: 05:37:46 executing program 1: 05:37:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:46 executing program 1: 05:37:46 executing program 3: 05:37:46 executing program 2: [ 230.967415][T15455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.001205][T15455] device bond38 entered promiscuous mode [ 231.007584][T15455] 8021q: adding VLAN 0 to HW filter on device bond38 05:37:46 executing program 3: 05:37:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:47 executing program 1: [ 231.078565][ T28] audit: type=1804 audit(1602394667.004:77): pid=15499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/229/bus" dev="sda1" ino=15756 res=1 errno=0 [ 231.111761][ T28] audit: type=1804 audit(1602394667.044:78): pid=15501 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/225/bus" dev="sda1" ino=16383 res=1 errno=0 [ 231.174638][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.209780][T15506] device bond39 entered promiscuous mode [ 231.222284][T15506] 8021q: adding VLAN 0 to HW filter on device bond39 05:37:47 executing program 1: 05:37:47 executing program 3: 05:37:47 executing program 2: 05:37:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:47 executing program 2: 05:37:47 executing program 1: [ 231.958104][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:47 executing program 3: 05:37:47 executing program 1: [ 232.009269][T15557] device bond40 entered promiscuous mode [ 232.029396][T15557] 8021q: adding VLAN 0 to HW filter on device bond40 05:37:48 executing program 2: [ 232.054867][ T28] audit: type=1804 audit(1602394667.984:79): pid=15600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/230/bus" dev="sda1" ino=15756 res=1 errno=0 05:37:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 232.089481][ T28] audit: type=1804 audit(1602394668.014:80): pid=15602 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/226/bus" dev="sda1" ino=16378 res=1 errno=0 05:37:48 executing program 1: 05:37:48 executing program 3: 05:37:48 executing program 2: [ 232.172546][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:48 executing program 1: [ 232.249958][T15605] device bond41 entered promiscuous mode [ 232.306993][T15605] 8021q: adding VLAN 0 to HW filter on device bond41 05:37:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:48 executing program 1: 05:37:48 executing program 3: 05:37:48 executing program 2: 05:37:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:48 executing program 2: 05:37:48 executing program 3: [ 232.938502][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:48 executing program 1: 05:37:48 executing program 2: [ 232.987983][T15659] device bond42 entered promiscuous mode [ 233.013306][T15659] 8021q: adding VLAN 0 to HW filter on device bond42 05:37:49 executing program 3: [ 233.041385][ T28] audit: type=1804 audit(1602394668.974:81): pid=15700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/231/bus" dev="sda1" ino=15970 res=1 errno=0 05:37:49 executing program 1: [ 233.087387][ T28] audit: type=1804 audit(1602394669.014:82): pid=15706 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/227/bus" dev="sda1" ino=16336 res=1 errno=0 05:37:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:49 executing program 2: 05:37:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:49 executing program 3: 05:37:49 executing program 1: 05:37:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:49 executing program 2: 05:37:49 executing program 3: 05:37:49 executing program 1: [ 233.947048][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:49 executing program 2: 05:37:50 executing program 3: [ 233.998754][T15722] device bond43 entered promiscuous mode [ 234.006169][T15722] 8021q: adding VLAN 0 to HW filter on device bond43 [ 234.022939][ T28] audit: type=1804 audit(1602394669.954:83): pid=15763 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/232/bus" dev="sda1" ino=16336 res=1 errno=0 05:37:50 executing program 1: [ 234.070632][ T28] audit: type=1804 audit(1602394669.994:84): pid=15767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/228/bus" dev="sda1" ino=16378 res=1 errno=0 05:37:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:50 executing program 2: 05:37:50 executing program 1: 05:37:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:50 executing program 3: 05:37:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:50 executing program 2: 05:37:50 executing program 1: 05:37:50 executing program 3: [ 234.910765][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:50 executing program 2: [ 234.971856][T15786] device bond44 entered promiscuous mode [ 235.003206][T15786] 8021q: adding VLAN 0 to HW filter on device bond44 05:37:51 executing program 2: [ 235.018810][ T28] audit: type=1804 audit(1602394670.944:85): pid=15831 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/233/bus" dev="sda1" ino=16376 res=1 errno=0 05:37:51 executing program 1: [ 235.176651][ T28] audit: type=1804 audit(1602394671.034:86): pid=15836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/229/bus" dev="sda1" ino=16383 res=1 errno=0 05:37:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:51 executing program 3: 05:37:51 executing program 2: 05:37:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:51 executing program 1: 05:37:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:51 executing program 2: 05:37:51 executing program 3: 05:37:51 executing program 1: [ 235.916347][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:51 executing program 3: [ 235.986179][T15852] device bond45 entered promiscuous mode [ 235.997878][T15852] 8021q: adding VLAN 0 to HW filter on device bond45 05:37:51 executing program 1: 05:37:51 executing program 2: [ 236.024209][ T28] audit: type=1804 audit(1602394671.954:87): pid=15895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/234/bus" dev="sda1" ino=16384 res=1 errno=0 [ 236.142708][ T28] audit: type=1804 audit(1602394672.044:88): pid=15903 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/230/bus" dev="sda1" ino=16381 res=1 errno=0 05:37:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e) 05:37:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:52 executing program 2: 05:37:52 executing program 1: 05:37:52 executing program 3: 05:37:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:52 executing program 3: 05:37:52 executing program 2: 05:37:52 executing program 1: [ 236.935618][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:52 executing program 2: 05:37:52 executing program 3: [ 236.986918][T15917] device bond46 entered promiscuous mode [ 236.995583][T15917] 8021q: adding VLAN 0 to HW filter on device bond46 05:37:53 executing program 3: [ 237.164464][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 237.164491][ T28] audit: type=1804 audit(1602394673.094:90): pid=15967 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/231/bus" dev="sda1" ino=15756 res=1 errno=0 05:37:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e) 05:37:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:53 executing program 1: 05:37:53 executing program 3: 05:37:53 executing program 2: 05:37:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e) 05:37:53 executing program 3: 05:37:53 executing program 2: 05:37:53 executing program 1: [ 237.990384][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:53 executing program 3: 05:37:54 executing program 2: [ 238.043448][T15983] device bond47 entered promiscuous mode [ 238.062072][T15983] 8021q: adding VLAN 0 to HW filter on device bond47 05:37:54 executing program 1: [ 238.077793][ T28] audit: type=1804 audit(1602394674.004:91): pid=16027 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/236/bus" dev="sda1" ino=16374 res=1 errno=0 [ 238.234600][ T28] audit: type=1804 audit(1602394674.084:92): pid=16034 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/232/bus" dev="sda1" ino=16018 res=1 errno=0 05:37:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e) 05:37:54 executing program 2: 05:37:54 executing program 3: 05:37:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:54 executing program 1: 05:37:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e) 05:37:54 executing program 3: 05:37:54 executing program 2: 05:37:54 executing program 1: [ 238.973815][T16049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:55 executing program 1: [ 239.023362][T16049] device bond48 entered promiscuous mode [ 239.033927][T16049] 8021q: adding VLAN 0 to HW filter on device bond48 05:37:55 executing program 2: 05:37:55 executing program 3: [ 239.071010][ T28] audit: type=1804 audit(1602394675.004:93): pid=16091 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/237/bus" dev="sda1" ino=15971 res=1 errno=0 [ 239.183514][ T28] audit: type=1804 audit(1602394675.074:94): pid=16097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/233/bus" dev="sda1" ino=16381 res=1 errno=0 05:37:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:55 executing program 1: 05:37:55 executing program 3: 05:37:55 executing program 2: 05:37:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e) 05:37:55 executing program 2: 05:37:55 executing program 3: [ 239.974085][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:55 executing program 2: [ 240.021224][T16112] device bond49 entered promiscuous mode 05:37:56 executing program 1: [ 240.065492][T16112] 8021q: adding VLAN 0 to HW filter on device bond49 05:37:56 executing program 2: 05:37:56 executing program 3: [ 240.093527][ T28] audit: type=1804 audit(1602394676.024:95): pid=16155 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/238/bus" dev="sda1" ino=16336 res=1 errno=0 [ 240.216159][ T28] audit: type=1804 audit(1602394676.144:96): pid=16164 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/234/bus" dev="sda1" ino=15753 res=1 errno=0 05:37:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:37:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:56 executing program 2: 05:37:56 executing program 3: 05:37:56 executing program 1: 05:37:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) [ 240.972559][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 241.006393][T16171] device bond50 entered promiscuous mode 05:37:56 executing program 1: 05:37:57 executing program 3: [ 241.018903][T16171] 8021q: adding VLAN 0 to HW filter on device bond50 05:37:57 executing program 2: 05:37:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:57 executing program 1: [ 241.112340][ T28] audit: type=1804 audit(1602394677.044:97): pid=16217 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/239/bus" dev="sda1" ino=16065 res=1 errno=0 05:37:57 executing program 2: [ 241.231226][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 241.288780][ T28] audit: type=1804 audit(1602394677.144:98): pid=16224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/235/bus" dev="sda1" ino=16382 res=1 errno=0 [ 241.384305][T16225] device bond51 entered promiscuous mode [ 241.390962][T16225] 8021q: adding VLAN 0 to HW filter on device bond51 05:37:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:37:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000040), 0xb2ffffff) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 05:37:58 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) munlock(&(0x7f0000b93000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) 05:37:58 executing program 2: 05:37:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) [ 242.071715][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 242.099158][T16271] device bond52 entered promiscuous mode 05:37:58 executing program 2: 05:37:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:37:58 executing program 2: [ 242.118384][T16271] 8021q: adding VLAN 0 to HW filter on device bond52 [ 242.140014][T16311] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program 05:37:58 executing program 2: [ 242.183996][T16311] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program [ 242.202373][T16319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 242.229076][ T28] audit: type=1804 audit(1602394678.154:99): pid=16322 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/240/bus" dev="sda1" ino=16372 res=1 errno=0 05:37:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x15, 0xb417f6abea11baa3, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 242.392531][T16319] device bond53 entered promiscuous mode 05:37:58 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) close(r0) [ 242.508406][ T28] audit: type=1804 audit(1602394678.194:100): pid=16323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/236/bus" dev="sda1" ino=16373 res=1 errno=0 [ 242.533735][T16319] 8021q: adding VLAN 0 to HW filter on device bond53 05:37:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:37:59 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:37:59 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x2, 0x1) 05:37:59 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) munlock(&(0x7f0000b93000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) 05:37:59 executing program 2: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x1e6, 0x0, 0x0) 05:37:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 05:37:59 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) munlock(&(0x7f0000b93000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) [ 243.155145][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:37:59 executing program 2: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x1e6, 0x0, 0x0) [ 243.209928][T16388] device bond54 entered promiscuous mode [ 243.234378][ T28] audit: type=1804 audit(1602394679.164:101): pid=16432 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/241/bus" dev="sda1" ino=16371 res=1 errno=0 [ 243.245668][T16388] 8021q: adding VLAN 0 to HW filter on device bond54 [ 243.359785][ T28] audit: type=1804 audit(1602394679.204:102): pid=16433 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/237/bus" dev="sda1" ino=16378 res=1 errno=0 05:37:59 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:37:59 executing program 2: preadv2(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f0000002200)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x1e6, 0x0, 0x0) [ 243.723891][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 243.887254][T16444] device bond55 entered promiscuous mode 05:37:59 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) munlock(&(0x7f0000b93000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) [ 243.934097][T16444] 8021q: adding VLAN 0 to HW filter on device bond55 05:37:59 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 05:38:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:00 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) munlock(&(0x7f0000b93000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) 05:38:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 244.040962][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 244.058789][T16485] device bond56 entered promiscuous mode [ 244.069696][T16485] 8021q: adding VLAN 0 to HW filter on device bond56 [ 244.175945][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 244.269291][ T28] audit: type=1804 audit(1602394680.194:103): pid=16558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/242/bus" dev="sda1" ino=16376 res=1 errno=0 [ 244.302297][T16525] device bond57 entered promiscuous mode 05:38:00 executing program 3: preadv2(0xffffffffffffffff, &(0x7f0000003580), 0x0, 0x0, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) bind$inet6(r0, 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/122, 0x7a) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') [ 244.346652][T16525] 8021q: adding VLAN 0 to HW filter on device bond57 [ 244.421970][ T28] audit: type=1804 audit(1602394680.244:104): pid=16567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/238/bus" dev="sda1" ino=16375 res=1 errno=0 05:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:38:00 executing program 3: preadv2(0xffffffffffffffff, &(0x7f0000003580), 0x0, 0x0, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) bind$inet6(r0, 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/122, 0x7a) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') [ 244.728235][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:38:00 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) munlock(&(0x7f0000b93000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) 05:38:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 244.839929][T16579] device bond58 entered promiscuous mode [ 244.848786][T16579] 8021q: adding VLAN 0 to HW filter on device bond58 05:38:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {0x0}, {0x0}], 0x6, 0x0, 0x0) [ 244.915486][T16619] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:38:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 245.078101][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 245.142371][T16630] device bond59 entered promiscuous mode [ 245.160462][T16630] 8021q: adding VLAN 0 to HW filter on device bond59 05:38:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {0x0}, {0x0}], 0x6, 0x0, 0x0) 05:38:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 245.292864][T16676] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 245.315528][ T28] audit: type=1804 audit(1602394681.244:105): pid=16678 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/243/bus" dev="sda1" ino=16371 res=1 errno=0 05:38:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {0x0}, {0x0}], 0x6, 0x0, 0x0) [ 245.389224][ T28] audit: type=1804 audit(1602394681.304:106): pid=16683 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/239/bus" dev="sda1" ino=16383 res=1 errno=0 [ 245.441623][T16674] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {0x0}, {0x0}], 0x6, 0x0, 0x0) [ 245.641115][T16680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 245.678968][T16680] device bond60 entered promiscuous mode [ 245.709739][T16680] 8021q: adding VLAN 0 to HW filter on device bond60 05:38:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {0x0}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {0x0}, {0x0}], 0x6, 0x0, 0x0) 05:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 05:38:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x8d888d, &(0x7f00000003c0)='#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) open(0x0, 0x0, 0x0) 05:38:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 245.942543][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 246.007987][T16742] device bond61 entered promiscuous mode [ 246.033025][T16742] 8021q: adding VLAN 0 to HW filter on device bond61 05:38:02 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/wireless\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/245, 0xf5}], 0x2, 0x20000000, 0x0) 05:38:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 246.329997][ T28] audit: type=1804 audit(1602394682.254:107): pid=16794 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/240/bus" dev="sda1" ino=16384 res=1 errno=0 [ 246.399586][ T28] audit: type=1804 audit(1602394682.284:108): pid=16795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/244/bus" dev="sda1" ino=16377 res=1 errno=0 05:38:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x9) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 05:38:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x9) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) [ 247.082755][T16743] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.090407][T16743] bridge0: port 1(bridge_slave_0) entered disabled state 05:38:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100000003, 0x9) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 05:38:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0) [ 247.321278][ T28] audit: type=1804 audit(1602394683.254:109): pid=16812 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/241/bus" dev="sda1" ino=16373 res=1 errno=0 [ 247.445658][ T28] audit: type=1804 audit(1602394683.374:110): pid=16821 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/245/bus" dev="sda1" ino=16383 res=1 errno=0 [ 248.518334][T16743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.594316][T16743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.273599][T16743] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.282593][T16743] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.291711][T16743] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.300769][T16743] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 05:38:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 249.500055][T16779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.527899][T16779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.536868][T16779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.547819][T16779] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.558757][ T28] audit: type=1804 audit(1602394685.484:111): pid=16828 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/242/bus" dev="sda1" ino=16384 res=1 errno=0 [ 249.585089][T16779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.602842][T16781] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 250.266816][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.274274][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.282653][T16798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.291919][T16798] 8021q: adding VLAN 0 to HW filter on device team0 05:38:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x8d888d, &(0x7f00000003c0)='#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) open(0x0, 0x0, 0x0) [ 250.302407][T16798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 05:38:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 05:38:06 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0) 05:38:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 250.426953][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 250.471949][T16841] device bond62 entered promiscuous mode [ 250.483542][ T28] audit: type=1804 audit(1602394686.414:112): pid=16850 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/243/bus" dev="sda1" ino=16383 res=1 errno=0 [ 250.511606][T16841] 8021q: adding VLAN 0 to HW filter on device bond62 [ 250.521960][ T28] audit: type=1804 audit(1602394686.414:113): pid=16885 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/246/bus" dev="sda1" ino=16373 res=1 errno=0 05:38:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x8d888d, &(0x7f00000003c0)='#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) open(0x0, 0x0, 0x0) [ 250.754402][T16849] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 05:38:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 251.426026][ T28] audit: type=1804 audit(1602394687.354:114): pid=16914 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/247/bus" dev="sda1" ino=16383 res=1 errno=0 [ 251.490396][ T28] audit: type=1804 audit(1602394687.394:115): pid=16915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/244/bus" dev="sda1" ino=16381 res=1 errno=0 [ 251.815943][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.823110][T16899] bridge0: port 1(bridge_slave_0) entered disabled state 05:38:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 252.337559][ T28] audit: type=1804 audit(1602394688.264:116): pid=16921 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/248/bus" dev="sda1" ino=16368 res=1 errno=0 [ 252.422320][ T28] audit: type=1804 audit(1602394688.354:117): pid=16926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/245/bus" dev="sda1" ino=16383 res=1 errno=0 [ 253.023521][T16899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.130806][T16899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.279059][T16899] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.289365][T16899] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.305936][T16899] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.317814][T16899] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 05:38:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x8d888d, &(0x7f00000003c0)='#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) open(0x0, 0x0, 0x0) [ 254.529929][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.538096][T16902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.546615][T16902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.556210][T16902] 8021q: adding VLAN 0 to HW filter on device team0 05:38:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x8d888d, &(0x7f00000003c0)='#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) open(0x0, 0x0, 0x0) [ 254.566373][T16902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.590260][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:38:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x8d888d, &(0x7f00000003c0)='#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) open(0x0, 0x0, 0x0) 05:38:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 254.706026][T16936] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 254.711511][ T28] audit: type=1804 audit(1602394690.634:118): pid=16942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/249/bus" dev="sda1" ino=15741 res=1 errno=0 [ 254.754654][ T28] audit: type=1804 audit(1602394690.684:119): pid=16946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/246/bus" dev="sda1" ino=15715 res=1 errno=0 [ 254.992866][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 255.023848][T16943] device bond63 entered promiscuous mode 05:38:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x8d888d, &(0x7f00000003c0)='#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) open(0x0, 0x0, 0x0) [ 255.082962][T16943] 8021q: adding VLAN 0 to HW filter on device bond63 05:38:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 05:38:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x8d888d, &(0x7f00000003c0)='#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) open(0x0, 0x0, 0x0) [ 255.213319][T16995] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 255.370566][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 255.432570][T16996] device bond64 entered promiscuous mode [ 255.444463][T16996] 8021q: adding VLAN 0 to HW filter on device bond64 [ 255.487085][ T3557] tipc: TX() has been purged, node left! 05:38:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:38:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 255.718240][ T28] audit: type=1804 audit(1602394691.644:120): pid=17061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/250/bus" dev="sda1" ino=16369 res=1 errno=0 [ 255.766534][T17056] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 255.812385][ T28] audit: type=1804 audit(1602394691.724:121): pid=17064 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/247/bus" dev="sda1" ino=16370 res=1 errno=0 [ 255.847734][T17056] device bond65 entered promiscuous mode [ 255.897806][T17056] 8021q: adding VLAN 0 to HW filter on device bond65 [ 255.969663][T17055] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 256.283303][T17122] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 257.293833][ T3557] device hsr_slave_0 left promiscuous mode [ 257.314041][ T3557] device hsr_slave_1 left promiscuous mode [ 257.324497][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.341231][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.360650][ T3557] device bridge_slave_1 left promiscuous mode [ 257.366814][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.391286][ T3557] device bridge_slave_0 left promiscuous mode [ 257.397535][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.713577][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 257.724221][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 257.734051][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.745849][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.775312][ T3557] bond0 (unregistering): Released all slaves [ 258.775719][ T3557] tipc: TX() has been purged, node left! [ 259.735714][ T3557] device hsr_slave_0 left promiscuous mode [ 259.742338][ T3557] device hsr_slave_1 left promiscuous mode [ 259.748589][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.756592][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.764255][ T3557] device bridge_slave_1 left promiscuous mode [ 259.770708][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.778242][ T3557] device bridge_slave_0 left promiscuous mode [ 259.784910][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.907391][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 259.917781][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 259.927807][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.938711][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.964370][ T3557] bond0 (unregistering): Released all slaves [ 260.492305][T17181] IPVS: ftp: loaded support on port[0] = 21 [ 260.552852][T17181] chnl_net:caif_netlink_parms(): no params data found [ 260.583031][T17181] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.590246][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.598057][T17181] device bridge_slave_0 entered promiscuous mode [ 260.607497][T17181] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.615031][T17181] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.622980][T17181] device bridge_slave_1 entered promiscuous mode [ 260.638220][T17181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.648858][T17181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.665750][T17181] team0: Port device team_slave_0 added [ 260.672644][T17181] team0: Port device team_slave_1 added [ 260.685857][T17181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.692908][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.720423][T17181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.732792][T17181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.740101][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.767237][T17181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.788251][T17181] device hsr_slave_0 entered promiscuous mode [ 260.795201][T17181] device hsr_slave_1 entered promiscuous mode [ 260.801977][T17181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.809694][T17181] Cannot create hsr debugfs directory [ 260.839189][T17181] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.846331][T17181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.853740][T17181] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.860886][T17181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.892538][T17181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.905121][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.913720][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.921625][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.933476][T17181] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.943927][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.953076][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.960090][ T9944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.982098][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.990826][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.997886][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.006402][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.015546][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.024103][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.035278][T17181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.046134][T17181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.054661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.062929][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.080386][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.087826][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.096297][T17181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.140445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.148931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.157741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.166318][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.176849][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.184937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.193343][T17181] device veth0_vlan entered promiscuous mode [ 261.203996][T17181] device veth1_vlan entered promiscuous mode [ 261.219535][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.228299][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.236521][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.245169][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.255622][T17181] device veth0_macvtap entered promiscuous mode [ 261.264892][T17181] device veth1_macvtap entered promiscuous mode [ 261.277717][T17181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.289145][T17181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.299757][T17181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.311023][T17181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.321209][T17181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.332106][T17181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.342173][T17181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.353102][ T9944] Bluetooth: hci4: command 0x0406 tx timeout [ 261.359290][ T9944] Bluetooth: hci0: command 0x0406 tx timeout [ 261.360323][ T32] Bluetooth: hci5: command 0x0406 tx timeout [ 261.365997][T17181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.381341][ T9944] Bluetooth: hci3: command 0x0406 tx timeout [ 261.388697][T17181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.397078][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.405363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.413298][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.421934][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.434898][T17181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.457002][T17181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.484393][T17181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.496104][T17181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.506612][T17181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.518012][T17181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.528426][T17181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.539567][T17181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.551462][T17181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.563881][T17191] IPVS: ftp: loaded support on port[0] = 21 [ 261.572037][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.582578][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.659743][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.668104][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.676939][T17191] chnl_net:caif_netlink_parms(): no params data found [ 261.695170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.704160][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.714096][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.728144][T17191] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.737930][T17191] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.745957][T17191] device bridge_slave_0 entered promiscuous mode [ 261.754273][T17191] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.761501][T17191] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.768964][T17191] device bridge_slave_1 entered promiscuous mode [ 261.775937][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.791990][T17191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.803660][T17191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.285926][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.293461][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.554342][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 263.047662][T17565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.117705][T17565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.520427][T16836] Bluetooth: hci2: command 0x0409 tx timeout [ 263.876689][T17572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.884504][T17572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.892519][T17572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.901034][T17572] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.910138][T17572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 05:38:19 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1dc040d941e0bc40c971a009b810f69925b8985f6fb8e093d9e34c2bfdc0a043f51493f1f7a50867dab224d2b7cb3d56bfaa824fceab3c99f0df41bf32449b00da7dce6bdeff2e5f42f5ce04000000a8c58666ae19865e79f9e2f04fa3bedb65831b6d858a5aea18bdcda69b6c"], 0x38}}, 0x0) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b1b284b9b3342", 0xff8d}], 0x1) 05:38:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:38:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 263.929804][T17191] team0: Port device team_slave_0 added [ 263.939049][T17191] team0: Port device team_slave_1 added [ 263.973570][T17191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.989268][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.022517][T17191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.033176][ T28] audit: type=1804 audit(1602394699.954:122): pid=17600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/251/bus" dev="sda1" ino=16367 res=1 errno=0 [ 264.081425][ T28] audit: type=1804 audit(1602394700.004:123): pid=17602 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/248/bus" dev="sda1" ino=16366 res=1 errno=0 [ 264.126870][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 264.156254][T17590] device bond66 entered promiscuous mode [ 264.162328][T17590] 8021q: adding VLAN 0 to HW filter on device bond66 [ 264.173383][T17599] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 264.229908][T17191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.237818][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.266822][T17191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.292225][T13880] tipc: TX() has been purged, node left! [ 264.314081][T17191] device hsr_slave_0 entered promiscuous mode [ 264.321752][T17191] device hsr_slave_1 entered promiscuous mode [ 264.328297][T17191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.350161][T17191] Cannot create hsr debugfs directory [ 264.436362][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 264.457044][T17656] device bond67 entered promiscuous mode [ 264.467046][T17656] 8021q: adding VLAN 0 to HW filter on device bond67 [ 264.676403][T17191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.724342][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.732406][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.743312][T17191] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.755658][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.765500][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.774173][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.781637][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.821149][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.829636][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.838130][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.846471][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.853524][ T9911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.862353][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.871380][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.880340][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.888912][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.907958][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.931444][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.940300][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.948499][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.957610][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.012578][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.020759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.029679][T17191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.088786][T17191] device veth0_vlan entered promiscuous mode [ 265.095521][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.104260][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.113234][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.121919][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.147920][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.155588][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.166557][T17191] device veth1_vlan entered promiscuous mode [ 265.199959][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.208249][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.216828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.225604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.237369][T17191] device veth0_macvtap entered promiscuous mode [ 265.246387][T17191] device veth1_macvtap entered promiscuous mode [ 265.258874][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.269843][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.280112][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.290927][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.301407][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.312303][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.322661][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.333331][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.344469][T17191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.355891][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.363925][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.372165][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.380743][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.390523][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.401374][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.412495][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.423241][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.433414][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.444166][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.454745][T17191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.465209][T17191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.476365][T17191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.486710][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.495630][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.506867][T13880] device hsr_slave_0 left promiscuous mode [ 265.513411][T13880] device hsr_slave_1 left promiscuous mode [ 265.521018][T13880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.528575][T13880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.537117][T13880] device bridge_slave_1 left promiscuous mode [ 265.543831][T13880] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.551902][T13880] device bridge_slave_0 left promiscuous mode [ 265.558166][T13880] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.590542][ T9911] Bluetooth: hci2: command 0x041b tx timeout [ 265.685466][T13880] team0 (unregistering): Port device team_slave_1 removed [ 265.695231][T13880] team0 (unregistering): Port device team_slave_0 removed [ 265.705108][T13880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.716193][T13880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.742564][T13880] bond0 (unregistering): Released all slaves [ 265.838583][T13956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.854957][T13956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.862911][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.882629][T13956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.892451][T13956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.900373][ T9944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.364448][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.371914][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.120857][T17768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.199909][T17768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.682300][ T17] Bluetooth: hci2: command 0x040f tx timeout 05:38:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000140), 0x8280) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0xb272, 0x2, 0x0, 0x0, 0x0, 0x800, 0x4100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2220020, &(0x7f0000001800)=ANY=[@ANYRESDEC, @ANYBLOB="2e8dadddd81e9d9e292df8b91c56b2a76b802cde1835be0741809ba6b7d485f5e92ecf884dea5ed485df80ae488d21667ac53a7b18fc372f5e0906435976c08f24fc2b311433cf2ef2b4294255a6eec025232ef447bb06ffee7802eb2ec5067aab9bcd24c3eda86735015109715aa04c6c3d8a5fec5ffc03d3226da6f90cf4df5fa9a42c8c7b955ef3e694a5a901cc9fc5337d08fdcb99c8846bacd2939c0da7a945bc8a88e81fddd5d1141f7c2d7257e90a0b8a8a4e4e89277f5b9cccdb6d00fc017c74607f5aa6cb94beaad2a9af2d3c2ed30e716a5041b4fbe310a77522aae59ee9db9c262463e0d36441a44467ae768d730a152c77239a392db82e9377af5f1184e8cf24df319086a5d64b81859a5fc6bce90f9909200dfc5f779dda3c485a87fdfc3cba9567fb70dafe63caeae4d04da0d2763ce6d4b6042efdb0991fb9c288f7d7e63acd7b0a79dbfb69e5f2992379bd8a8d41b91e46920d3c01c5abd6d48dea0dfead2be480a1ab14f0e2a213f5ef90fd31e23e7aa2eb8a6c617ec03b9bb39bdc7201cecbb6f38383493b47ddeed4b0288ead7c341305a020cd8bbe89fd1c8bf9efcf0e1ef7151b14374b3e7805a5d9d6b28f506935f8915fefc3d2091c7ab3b9d0f776130ed274e85df390c0704a12ef074254a4ea5e86acbdc445c090b468832666851929a1d4c9b68aa5953aa2c29b03bed08dbc02a84b1cc8db1a14348756cb32c86724798b7de1fc00e3034affa483ffd41a509749820456d603c61a82ae0c60b6bdfd86114f40b5d17d77e4f7092ecae85d26cb28de373795bf48baa9f819524233694adfa88887973bccb96dc44a8a2ee560f493eae08ea02026d15796a82adfe24b3e4c2993b36c1757016c0243bdb56c651b4863e976d88c42c478dee890b6c459229ad2fa83e43a01d62fb3d9aa302dd5bd37ddfa0acb6bd91a06c55c5ddc6ee93d47f5c6bc4ce4ac2b11d2b5f653fd97fa014ada3dc6ea13d3ca9dc45af6866a870103ba900f3f47a7da9f18cdfa4a367c786df452d2f06a15769e6a9da1488a7f042fae8a630af40dbd654ec02e0985d5746865c3324fdaf72c4b84229ca55fd12224788f1fc5241fbe11a419bbefe6801658594efdfde47fbf5f23dd19a0af0e411b2cb48312319a29f3185da26ab8e196b9c5625fb61b61c0942f522ec9308b0dcd229ee60b4cbcc4bf249075dc6c97030e3b0036f64c51a13ce929bbbf6b06cadf6b6628ffe7e2ba6730b14aeddfabb6ea04d0fcc69e54fda9bdd824b0dd401aac2dd45ba9d9e397ee1bce646dc888204a6c1a3ca7c2f8ad15eda6253ba6b0b8a0c2eca3efe597a49306157c2201f67a49ba7292207296390f80e1dbd39e420ef12d7d51bcdaa4d1fc7f02d49872f4f363817acbabf2e2834da1e799b13db900c2a93b30c1c51a3d054ce6d2b54e2aa0d1ba6d1361277f06ad355cde251ea1eaabb4a43b38f5b4cededad48bd19ef13111e74b983b40d7d98f091b2dcac25a68734be90f6d47f76ec7a2788104fe35bbffe0717513c79a1d50599d77cb0c8daa4c436bf89a58ddfdc35300e0eacbd9d62a95feb9fa3fd31390f1edf89a56f814e40a3ce339414cf624b0bd430b57b588cf35426aef196991c7c7e66e4873f0fbf79fd54d74ab965d2b73a6364b7c061e51e3c293a36382dbb1415d01cdb7a730a8d2035509602fbdf79f1c8c862f399b992e620dc9c03c2e4cbde5f7c8614e200efc2789ea22de997ccc354e40eee7a5f768050994815282b98c36c72eba0cc7eee666b5cc8221955cf7d2146e6e7497facc74a70adbcbdf99622955bbf39520668d0752c08c3852bca38959752020ebc4e97b8e4f0bbf519239d15af658a0f5eba1f78be0e31a77f25d046563473ac85dc61ed97982be96d86444c10c8403646a89437c692184006b1088a7fca180f5101076bad391852981e5efa640bbedfe4fb9b4c4dd1a39c8b900ac1a02c95df21a99d1b483b9559c89435caa256951272a0aaac15aff8c68d56b2a8d7ea26f66d689d340efcacddf6028410041b73a6e64bab56ca908faa25b026ca6215bdcf88dfa1807ff5761f4ac7ba35efe08d2d674173824def8ee273f1f875755f1e52c800893d3cbc3aee37718419d88f0a48fb7da573308230d78c52f3783031d0dba1f271559e670638da2805ee5afdf4c56b26ededbd92028c557c648d29d7e5cf8b72e1218413a3769f3dcbbd1950d69cdeb4c0377666da37dc2666718d9f6b6a31d47fd7199f7e09e94c0c3e3bf36fa0f3724d41fd89ca5a4e8283136c8eeaec69d8c2baab44baeaf875f63035671c14431edfee69b52f004b5f48eefd3d7779f3983e09c57427581c027c84f9284ce5c27d598b126f8cd1c36a693b6489c355db4d456ed2c5299e546d32e7d8d5e8d3a40adb3683fa8c40db373b833ed39529067799fc0a88d423bef51261d63646633ad01c94e4969467b5e3e436b456d5146c76f0fd8f92c6c99bd9d4bfbfd8b3d61329e5977955e66126653c982fa8abe5b37e88329365d2d6ea78227d6a08fa43cf4bac144bcf43a24cad0cc1bcba7a8ada4d27cdb03620b4aa3f0421507ecbf4be05d267a1e4bcfb8bb769647085c3c24d9b23aeadd1c3a259f58c35febee642417b442cae54101bb69745a260c14f2eda5588b62262b5d31dc3ae4d5bf2263cee689511425439bba6ed9f19cd5b1671ae527d8a0dd2632d31e2de6ebf3393abeda01e1a7ba30bcf73f56002c935490525f8b4022f5a361eea13612a33eef99d7dea9e56764e6252a6a7054146d349f49283efc6d1c0386df0c992b62e0cb186dfdb7e6d2c7e255fb3c9b6c29e6c15781cd7eca4d079f05d0bebae868d497947b50713069d785954204e82aca9e6cf213eb06df4941633ec73aa7530b3a34f92216ec542d3230008870142848317c8731370dc1c09c1de8e69f6e2fcb249e7d1cc5ddf65bd4f18a4a6a2b479706ed183f547330f23dcd2e46d1fd131f38acebf3ff30e5420dea94ff55d6dbc67df8a9834c2d0d283a49cea33cc85a0905586ba45b843364824ff0b4f7250d82531c1b1bfcf8a2934f5cac8f972aab86aa3f7e5266e99e3f0d81a4f5398645c0e1a9dc5706d8737a9e9acf51b8023ac0638e63c77634aa18bf9a474a16d36dda92ecb63763095399b31296ad89cd73ab852f78d136262498bf0c073bd39a89ff39586b51f0de533d153d63152304ebfeadb41e7f57652ff046d4bb3c76527130050af44850a75f5dbc706bdb163366b8292ba732c09f6f1ef20671f23af2db41458cc5609bb5adfcba756cf0da97318cad98b03447005b0b2ae3994624e2d9753875e4458bd4b5f087418a48e7b6274523434f4bdeaeebc651a4e094999b7f0ea9f60822dc835a1ca03a593c827dad7b5622359e3e0d72c91c746d987408e425b0ad061076d75f37c68d9994a53a3a146e1267fb792309c0de1e1568052d72b4e2e7645705a1d47b5b48a6444dfce531af46cef40c48a259bca05639c5132847d5557b09200196d1431ccc2484faa82cfcf6ba9dc0b41e79dd4ecd05877b6a495ced495ed70a3a76cd965b637c6a358f9691f80fc702bef2e02668ba857d3873174553d2850e6ed235a26c24317f533e067e0a97872493a7c25d7388f6af209ee1d2f2350ec344e29bd54b6a48d3ecc874cf71bd0c8b2278e57d8c6654bc0c5ef9c218828875de0f71a88b46c0184e05197db3114e63aa30b358010d4bae0ccdf134b7bc3e8d761c848f301280c5b115573b51bef82c29906b1a3ceda6ba42a3191f0f30b08c4da1c3c950abc5def8de546cabffce0ee7055b0c07a4d308c32ecacbed6d33342851d804c0edd240028652bb6ea915b08e0d65e665194cab61cedb6388ebe4e166ef48fc1a29c3632958ca1b211971dca28a4492011f1c2d9f40f9d68d5465192034d0c449917cfb491711b79662476ed58add643032011488da40b048964ed58363e719acae7b672714cb1d1dc64c24a83e23eda4a6e4940db6067db2b5b046bfdbf2d930e063889bd7d545dc46cfc1d6da8f24a2bf15cd026599aaf69655cc9829b4b91816658e1477afeaa06cc09eb2412594ad77456ecd6c8470e3e2019437666c2aaa723e50b8001541dc1719fafde1f89ac396cba9f1594818dac0dcea329b83a60d182eec460803b5d4bc2d6a01ba919e6082377377a9139b6d070bf8f1814c7fefe0190c7ea874559fa35dba75b399bfbae732f58452d1306a597066556ea2ff81e527f6a269f0b7e7e208841cbf2cca79c8a519855ff6082893e38e500f23b89be545cddba65170aeed8b2ca1bac876fe83a6eb0eb0128ada0922268deaf2e291a2e6e4fbec3145511c12aa1d2aa7351692e02aaef508d766c01f08c4ff77e900ccedbaea88bf267e4986f4638bff76d3d90d607e567495fafbbfac10a3df16a00d0972bb4cc492b9bd9814be794f1d739e939d022bbd02bc267a2e70e7e492b9def698acd4ea8e086a07953cfac4e0b3a1225eef99d30876ebda5ddc98b643050b6ab7726528bad5e74cfe6318190f0c62d43b4a3fca1b385d310b7a72621de4219b86789026c6acbc6ab529a4d94d8c3b8e25d96fdd2c11de30d4d6f942c9d23bade40bdb8e23ee62869af7c088dfed289f6a99bc8800e7976e5525df897d753fa79df8dacca208f7a2cb93ab1c2a5c6eee08fca5713edde121b37d7fbe8a63d1c4a971606c8134efbab134f3d158fcde4e48b2d650ba3035fd799a6526c25edaf60a8278112af1d79cc193089179081dfa8dfbe45f4d7ae362a728334f490850d55677900d0af842699536ed070f49a121914cfbfc0c2908921c77a692fcccef06bab2ce49dbc8094a236d94d588399e73034fb2519d44b8b1c7712ed4f4c01629bd35c5dfaf4f45adb1377fbd59031bd96c1d0c101e502bb3e52818d1312571f0e8b2fa296b88f8fbe34da00710942a8f69f2fc0109a9ae50a21c95ce84c0ca8c4725efb0b9432bd82eb5ce9305609de49e3d54f468e3cb4cb9357a6696f71b15e5729d715dbd1402700fb77eeaffadb21e460b753aa913f0934ce02b0b0b767b6cb071fb11e13b9c9666163f797095c649fc4391d6dba4560f1fd6f2523d23d5f0b2a38d379c38ba1a39c62f9f8a03f47c6979803abed566edd0b7c12c5f4debd6334c550e3a05100a61f0aa4ecdaf3be3078a1be7131b68f68029d099b230861d7e7e404e283cb3af461edba98ead19b4b0bba5af9be8120e22e57dd55427585d8c0fd8d0e6cbac145271a5a7cece76a814aa5bd9ab0ef2bd5417835d660c8d94b8e19ecadce93f725e773645cfb90ff21470fde69202276ccb3132c1ee8bc33b3ddd8b0974b1448d9de0768225e2297be1f9f727a41e88b5c76c129911ca555704660ec9502fcab0d14e8a72f8cb5660253cb9aabbee207de372d4620b9b332aae6dd122f614c81938262db8479a9b54dc8e9d0def1210728fa9e012b41e7ad2258a668039613f4dcfa8b6df7adc8d6eac3aa374ce0b8ee0fac243a5de31a1ec56361b893160a1fa99ece21e9b4e56e77ba58a32f05bb88d8a20790d1f9159ad44730c4fd7cdcc9de95181cc78007838f3ce38718426b54d146de1398384b79c2cc1e5978738a9a517b45f86f34fb45342eb5c52b34972d548a2baaef8a325ee3921b4531b14a429aa5c27ccff889ed98fb5edc7d36e05b718f1740234d573c2c05d4cc6efdc2694"]) 05:38:23 executing program 1: 05:38:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) 05:38:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 267.941326][T17769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.948846][T17769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.956754][T17769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.965655][T17769] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.975266][T17769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.046581][T17775] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 268.084081][ T28] audit: type=1804 audit(1602394704.014:124): pid=17778 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/252/bus" dev="sda1" ino=16382 res=1 errno=0 [ 268.150650][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 268.162674][ T28] audit: type=1804 audit(1602394704.094:125): pid=17789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/249/bus" dev="sda1" ino=16257 res=1 errno=0 [ 268.174279][T17777] device bond68 entered promiscuous mode [ 268.216413][T17777] 8021q: adding VLAN 0 to HW filter on device bond68 05:38:24 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001380)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 05:38:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) 05:38:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:24 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @empty, 'veth0_to_team\x00'}}, 0x80, 0x0}}], 0x2, 0x0) [ 268.483553][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 05:38:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 268.579651][T17832] device bond69 entered promiscuous mode [ 268.628285][T17832] 8021q: adding VLAN 0 to HW filter on device bond69 05:38:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27}, 0x24}}, 0x0) 05:38:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 268.846261][T17874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 268.915715][T17874] device bond70 entered promiscuous mode [ 268.977321][T17874] 8021q: adding VLAN 0 to HW filter on device bond70 [ 269.150940][T13880] tipc: TX() has been purged, node left! [ 270.015100][T13880] device hsr_slave_0 left promiscuous mode [ 270.031072][T13880] device hsr_slave_1 left promiscuous mode [ 270.046523][T13880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.064327][T13880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.080944][T13880] device bridge_slave_1 left promiscuous mode [ 270.097280][T13880] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.110886][T13880] device bridge_slave_0 left promiscuous mode [ 270.116998][T13880] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.326028][T13880] team0 (unregistering): Port device team_slave_1 removed [ 270.335225][T13880] team0 (unregistering): Port device team_slave_0 removed [ 270.344730][T13880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.355625][T13880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.381684][T13880] bond0 (unregistering): Released all slaves [ 271.702310][T17927] IPVS: ftp: loaded support on port[0] = 21 [ 271.764004][T17927] chnl_net:caif_netlink_parms(): no params data found [ 271.792373][T17927] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.799397][T17927] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.807549][T17927] device bridge_slave_0 entered promiscuous mode [ 271.815718][T17927] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.822999][T17927] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.830924][T17927] device bridge_slave_1 entered promiscuous mode [ 271.845121][T17927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.855488][T17927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.872610][T17927] team0: Port device team_slave_0 added [ 271.879355][T17927] team0: Port device team_slave_1 added [ 271.892179][T17927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.899108][T17927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.925014][T17927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.936819][T17927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.943901][T17927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.969800][T17927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.990793][T17927] device hsr_slave_0 entered promiscuous mode [ 271.997154][T17927] device hsr_slave_1 entered promiscuous mode [ 272.003612][T17927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.011247][T17927] Cannot create hsr debugfs directory [ 272.063129][T17927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.074310][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.083075][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.092166][T17927] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.101806][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.110123][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.118491][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.125623][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.134017][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.144256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.152741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.161200][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.168202][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.178276][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.198160][T17927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.208588][T17927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.220362][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.228981][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.237956][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.246391][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.254626][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.262994][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.271174][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.279362][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.287447][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.295711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.303860][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.320538][T17927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.328251][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.335832][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.370522][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.382171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.393086][T17927] device veth0_vlan entered promiscuous mode [ 272.408547][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.430644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.453305][T17927] device veth1_vlan entered promiscuous mode [ 272.464479][T17929] IPVS: ftp: loaded support on port[0] = 21 [ 272.474022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.482486][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.490575][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.506884][T17927] device veth0_macvtap entered promiscuous mode [ 272.523949][T17927] device veth1_macvtap entered promiscuous mode [ 272.553655][T17927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.564747][T17927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.574990][T17927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.585740][T17927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.595882][T17927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.606666][T17927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.616881][T17927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 272.627694][T17927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.638667][T17927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.654790][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.663129][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.671591][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.681657][T17927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.692951][T17927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.702984][T17927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.713435][T17927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.723345][T17927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.733798][T17927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.743766][T17927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 272.754411][T17927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.764962][T17927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.773967][T17929] chnl_net:caif_netlink_parms(): no params data found [ 272.784771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.793211][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.828459][T17929] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.835784][T17929] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.843767][T17929] device bridge_slave_0 entered promiscuous mode [ 272.857678][T17929] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.865604][T17929] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.873951][T17929] device bridge_slave_1 entered promiscuous mode [ 272.903913][T17929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.914883][T17929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.931075][T13880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.939010][T13880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.947772][T17929] team0: Port device team_slave_0 added [ 272.968023][T15180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.982512][T13880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.983922][T17929] team0: Port device team_slave_1 added [ 272.992164][T13880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.007092][T15180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.015050][T17929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.023114][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.049424][T17929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.061562][T17929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.069620][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.095796][T17929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 05:38:29 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private=0xa010102, {[@lsrr={0x83, 0x3}]}}}}}}, 0x0) 05:38:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 273.119435][T17929] device hsr_slave_0 entered promiscuous mode [ 273.127038][T17929] device hsr_slave_1 entered promiscuous mode [ 273.149490][T17929] debugfs: Directory 'hsr0' with parent 'hsr' already present! 05:38:29 executing program 5: [ 273.176702][T17929] Cannot create hsr debugfs directory [ 273.184659][T18336] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:29 executing program 1: 05:38:29 executing program 5: [ 273.266221][ T28] audit: type=1804 audit(1602394709.194:126): pid=18346 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/250/bus" dev="sda1" ino=15923 res=1 errno=0 [ 273.345848][ T28] audit: type=1804 audit(1602394709.224:127): pid=18347 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/253/bus" dev="sda1" ino=15939 res=1 errno=0 [ 273.524238][T17929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.554729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.564778][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.592543][T17929] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.622182][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.631298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.639518][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.646576][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.680517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.692331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.712302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.721070][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.728091][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.738134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.749839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.760512][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 273.768750][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.779598][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.788494][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.798879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.807820][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.821752][T17929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.834218][T17929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.842934][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.851862][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.870249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.878156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.888615][T17929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.941845][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.951275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.959965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.968118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.979953][T17929] device veth0_vlan entered promiscuous mode [ 273.992760][T17929] device veth1_vlan entered promiscuous mode [ 274.011113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.018955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.027422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.037844][T17929] device veth0_macvtap entered promiscuous mode [ 274.047380][T17929] device veth1_macvtap entered promiscuous mode [ 274.070144][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.083781][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.103538][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.113979][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.125241][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.135811][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.147130][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.159415][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.171116][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.181871][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.192500][T17929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.203602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.213105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.221642][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.232035][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.242649][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.252816][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.263825][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.274020][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.284824][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.295085][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.305722][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.315958][T17929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.326689][T17929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.337621][T17929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.346001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.355117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.394492][T13880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.412068][T13880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.419724][T13956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.428168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 05:38:30 executing program 2: 05:38:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:30 executing program 1: 05:38:30 executing program 5: 05:38:30 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 274.438812][T13956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.446510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.470270][ T5] Bluetooth: hci2: command 0x0409 tx timeout 05:38:30 executing program 5: 05:38:30 executing program 1: 05:38:30 executing program 2: [ 274.519278][T18430] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 274.582031][ T28] audit: type=1804 audit(1602394710.514:128): pid=18435 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/254/bus" dev="sda1" ino=15939 res=1 errno=0 05:38:30 executing program 5: 05:38:30 executing program 1: 05:38:30 executing program 2: [ 274.668825][ T28] audit: type=1804 audit(1602394710.544:129): pid=18436 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/251/bus" dev="sda1" ino=16097 res=1 errno=0 05:38:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:30 executing program 1: 05:38:30 executing program 5: 05:38:30 executing program 2: [ 274.812381][T18450] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:31 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:31 executing program 1: 05:38:31 executing program 5: 05:38:31 executing program 2: 05:38:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:31 executing program 1: 05:38:31 executing program 1: 05:38:31 executing program 5: 05:38:31 executing program 2: [ 275.454118][T18467] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 275.539873][ T28] audit: type=1804 audit(1602394711.464:130): pid=18475 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/252/bus" dev="sda1" ino=15939 res=1 errno=0 05:38:31 executing program 1: 05:38:31 executing program 5: [ 275.638887][ T28] audit: type=1804 audit(1602394711.514:131): pid=18481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/255/bus" dev="sda1" ino=16375 res=1 errno=0 [ 275.840846][ T9911] Bluetooth: hci1: command 0x041b tx timeout 05:38:32 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:32 executing program 2: 05:38:32 executing program 1: 05:38:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:32 executing program 5: 05:38:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:32 executing program 5: 05:38:32 executing program 2: [ 276.433530][T18498] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:32 executing program 1: 05:38:32 executing program 5: 05:38:32 executing program 1: 05:38:32 executing program 2: [ 276.547659][ T28] audit: type=1804 audit(1602394712.474:132): pid=18508 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/253/bus" dev="sda1" ino=16372 res=1 errno=0 [ 276.582012][ T9911] Bluetooth: hci2: command 0x041b tx timeout [ 276.657029][ T28] audit: type=1804 audit(1602394712.474:133): pid=18510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/256/bus" dev="sda1" ino=16380 res=1 errno=0 05:38:33 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:33 executing program 5: 05:38:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:33 executing program 1: 05:38:33 executing program 2: 05:38:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:33 executing program 2: [ 277.388231][T18528] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:33 executing program 5: 05:38:33 executing program 1: 05:38:33 executing program 1: 05:38:33 executing program 2: 05:38:33 executing program 5: [ 277.557681][ T28] audit: type=1804 audit(1602394713.484:134): pid=18539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/254/bus" dev="sda1" ino=16377 res=1 errno=0 [ 277.667728][ T28] audit: type=1804 audit(1602394713.484:135): pid=18544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/257/bus" dev="sda1" ino=16373 res=1 errno=0 [ 277.910398][ T5082] Bluetooth: hci1: command 0x040f tx timeout 05:38:34 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:34 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7f}) 05:38:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 05:38:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 05:38:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:38:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb0}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 05:38:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:38:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 05:38:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) rt_sigaction(0x26, 0x0, 0x0, 0x8, &(0x7f00000001c0)) [ 278.533520][ T28] audit: type=1804 audit(1602394714.464:136): pid=18577 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/258/bus" dev="sda1" ino=16306 res=1 errno=0 [ 278.610633][ T28] audit: type=1804 audit(1602394714.494:137): pid=18578 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/255/bus" dev="sda1" ino=16378 res=1 errno=0 [ 278.640666][ T5082] Bluetooth: hci2: command 0x040f tx timeout 05:38:35 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:35 executing program 5: getpid() sched_setscheduler(0x0, 0x5, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000000401"], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 05:38:35 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 05:38:35 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) poll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, 0x0) 05:38:35 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, 0x0, 0x0) 05:38:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) fchdir(0xffffffffffffffff) 05:38:35 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 05:38:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 05:38:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, 0x0, 0x0) [ 279.517722][ T28] audit: type=1804 audit(1602394715.444:138): pid=18615 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/256/bus" dev="sda1" ino=15944 res=1 errno=0 05:38:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 279.625433][ T28] audit: type=1804 audit(1602394715.494:139): pid=18617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/259/bus" dev="sda1" ino=16371 res=1 errno=0 [ 279.990465][ T5082] Bluetooth: hci1: command 0x0419 tx timeout 05:38:36 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, 0x0, 0x0) 05:38:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 05:38:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) alarm(0x0) 05:38:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) memfd_create(&(0x7f0000001a80)='{@&\x00', 0x0) 05:38:36 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) 05:38:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 05:38:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) mq_unlink(0x0) 05:38:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 05:38:36 executing program 2: bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @remote}, 0x100, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)='bond0\x00', 0x101, 0x80000000, 0x97}) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x6bf0, 0x20}, &(0x7f00006d3000/0x3000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002600290800000000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="08000000ac00"], 0x24}, 0x1, 0xffffff7f0e000000}, 0x84) socket(0x6, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') 05:38:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) setns(0xffffffffffffffff, 0x0) [ 280.525488][ T28] audit: type=1804 audit(1602394716.454:140): pid=18665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/260/bus" dev="sda1" ino=16373 res=1 errno=0 [ 280.612826][ T28] audit: type=1804 audit(1602394716.464:141): pid=18657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/257/bus" dev="sda1" ino=16372 res=1 errno=0 [ 280.710275][ T9911] Bluetooth: hci2: command 0x0419 tx timeout 05:38:37 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 05:38:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) lseek(0xffffffffffffffff, 0x0, 0x0) 05:38:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) 05:38:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {0x0}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc3162837", 0x1a}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 05:38:37 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) tgkill(0xffffffffffffffff, 0x0, 0x17) get_thread_area(0x0) 05:38:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 281.369935][T18689] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:38:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 281.465977][ T28] audit: type=1804 audit(1602394717.394:142): pid=18697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/258/bus" dev="sda1" ino=16373 res=1 errno=0 05:38:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) 05:38:37 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000029c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002a40)={0xa}, 0x0, 0x0}) 05:38:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb0}, [@ldst={0x6, 0x2, 0x0, 0x0, 0x0, 0xfffe}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 281.587175][ T28] audit: type=1804 audit(1602394717.504:143): pid=18708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/261/bus" dev="sda1" ino=16051 res=1 errno=0 [ 281.910260][ T5] usb 3-1: new full-speed USB device number 7 using dummy_hcd 05:38:38 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) 05:38:38 executing program 5: request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) 05:38:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:38:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 05:38:38 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c4"], 0x21, 0x0) 05:38:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb0}, [@ldst={0x6, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 05:38:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) [ 282.350526][ T5] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.399718][ T28] audit: type=1804 audit(1602394718.324:144): pid=18733 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/259/bus" dev="sda1" ino=16337 res=1 errno=0 [ 282.430702][ T5] usb 3-1: not running at top speed; connect to a high speed hub 05:38:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "d6a6294b"}]}}, 0x0}, 0x0) [ 282.530603][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.550867][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.572416][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.590817][ T28] audit: type=1804 audit(1602394718.524:145): pid=18747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/262/bus" dev="sda1" ino=16377 res=1 errno=0 [ 282.610245][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.810517][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.819560][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.820243][ T5082] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 282.850262][ T5] usb 3-1: Product: syz [ 282.868426][ T5] usb 3-1: Manufacturer: syz [ 282.873636][ T5] usb 3-1: SerialNumber: syz [ 283.170290][ T5] cdc_ncm 3-1:1.0: bind() failure [ 283.178100][ T5] cdc_ncm 3-1:1.1: bind() failure [ 283.191635][ T5082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.198763][ T5] usb 3-1: USB disconnect, device number 7 [ 283.226186][ T5082] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 283.241473][ T5082] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.262662][ T5082] usb 6-1: config 0 descriptor?? [ 283.760907][ T5082] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 283.776214][ T5082] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0009/input/input5 [ 283.852395][ T5082] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 283.900291][T15180] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 283.962602][ T5] usb 6-1: USB disconnect, device number 2 [ 284.340271][T15180] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.390457][T15180] usb 3-1: not running at top speed; connect to a high speed hub [ 284.501594][T15180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 284.512668][T15180] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.522949][T15180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.532755][T15180] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 05:38:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) r0 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000000c0)="9c", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000a40)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)="585ccbe48c330000c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c20706007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539506fef5dfec4", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r0}, 0x0, 0x0, 0x0) 05:38:40 executing program 1: getpid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 05:38:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x54}}, 0x0) 05:38:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:40 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) writev(0xffffffffffffffff, 0x0, 0x0) [ 284.660552][T18829] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x54}}, 0x0) [ 284.730389][ T5082] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 284.742149][T15180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.754718][ T28] audit: type=1804 audit(1602394720.684:146): pid=18837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/263/bus" dev="sda1" ino=16372 res=1 errno=0 05:38:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb0}, [@ldst={0x6, 0x2, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 284.758116][T15180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.840269][T15180] usb 3-1: can't set config #1, error -71 [ 284.844154][T18843] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.848849][T15180] usb 3-1: USB disconnect, device number 8 05:38:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) setrlimit(0x8, 0x0) [ 284.883636][ T28] audit: type=1804 audit(1602394720.734:147): pid=18838 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/260/bus" dev="sda1" ino=16375 res=1 errno=0 05:38:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x54}}, 0x0) 05:38:41 executing program 1: getpid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) [ 285.077970][T18856] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.090686][ T5082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.122413][ T5082] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 285.144886][ T5082] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.198338][ T5082] usb 6-1: config 0 descriptor?? 05:38:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:38:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)) 05:38:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) 05:38:41 executing program 1: getpid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 05:38:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:41 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:41 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001380)='cgroup2\x00', 0x0, 0x0) setuid(0xee01) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x1e1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 285.563018][T18876] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.600248][ T5082] usbhid 6-1:0.0: can't add hid device: -71 [ 285.606331][ T5082] usbhid: probe of 6-1:0.0 failed with error -71 05:38:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) pipe2(&(0x7f00000000c0), 0x0) [ 285.637965][ T5082] usb 6-1: USB disconnect, device number 3 05:38:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) 05:38:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x10000}) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[], 0x94}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000d80)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000800)="b676b035ae7f7b", 0x7}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 285.737827][T18893] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) [ 285.779097][ T28] audit: type=1804 audit(1602394721.704:148): pid=18896 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/261/bus" dev="sda1" ino=16384 res=1 errno=0 05:38:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) execve(0x0, 0x0, 0x0) [ 285.911251][ T28] audit: type=1804 audit(1602394721.774:149): pid=18897 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/264/bus" dev="sda1" ino=15950 res=1 errno=0 05:38:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) timer_create(0x0, 0x0, &(0x7f0000000200)) timer_gettime(0x0, &(0x7f0000000000)) 05:38:41 executing program 1: getpid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) [ 285.953206][T18906] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:41 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/190) 05:38:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002"], 0x54}}, 0x0) [ 286.172108][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:42 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) msgget(0x3, 0x0) 05:38:42 executing program 2: syz_emit_ethernet(0x1ad, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000002aa"], 0x0) 05:38:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002"], 0x54}}, 0x0) 05:38:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x54}, [@ldst={0x6, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdd0, &(0x7f0000002500)=""/208, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 05:38:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) setgid(0x0) [ 286.682123][ T28] audit: type=1804 audit(1602394722.614:150): pid=18935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/262/bus" dev="sda1" ino=16051 res=1 errno=0 [ 286.701284][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x11, @multicast1, 0x0, 0x2, 'lblcr\x00'}, 0x2c) 05:38:42 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) shutdown(0xffffffffffffffff, 0x0) 05:38:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002"], 0x54}}, 0x0) [ 286.851691][ T28] audit: type=1804 audit(1602394722.784:151): pid=18952 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/265/bus" dev="sda1" ino=16371 res=1 errno=0 05:38:42 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) link(0x0, 0x0) 05:38:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 286.947472][T18959] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 287.569140][ T28] audit: type=1804 audit(1602394723.494:152): pid=18975 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/263/bus" dev="sda1" ino=15952 res=1 errno=0 05:38:43 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:43 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capget(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clock_nanosleep(0x1, 0x1, 0x0, &(0x7f0000000480)) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 05:38:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300"], 0x54}}, 0x0) 05:38:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') futimesat(r0, 0x0, 0x0) 05:38:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 05:38:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) lstat(0x0, 0x0) [ 287.743757][T18981] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:38:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff6}]}) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 287.789033][T18985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300"], 0x54}}, 0x0) 05:38:43 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 05:38:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}]}) [ 287.873866][ T28] audit: type=1804 audit(1602394723.804:153): pid=18993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/266/bus" dev="sda1" ino=16375 res=1 errno=0 05:38:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300"], 0x54}}, 0x0) [ 287.968100][T19001] FAT-fs (loop5): bogus number of reserved sectors [ 288.011457][T19001] FAT-fs (loop5): Can't find a valid FAT filesystem [ 288.111739][T19001] FAT-fs (loop5): bogus number of reserved sectors [ 288.119453][T19001] FAT-fs (loop5): Can't find a valid FAT filesystem 05:38:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 288.511529][ T28] audit: type=1804 audit(1602394724.444:154): pid=19020 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/264/bus" dev="sda1" ino=15952 res=1 errno=0 05:38:44 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f330000001400"], 0x54}}, 0x0) 05:38:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/242) 05:38:44 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7ffffff6}]}) pwritev(r0, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) pkey_free(0xffffffffffffffff) 05:38:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 05:38:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) signalfd4(0xffffffffffffffff, &(0x7f0000001600), 0x8, 0x0) 05:38:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f330000001400"], 0x54}}, 0x0) 05:38:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000380)=[@request_death, @free_buffer], 0x0, 0x0, 0x0}) 05:38:44 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/242) 05:38:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = dup(r0) sync_file_range(r1, 0x0, 0x0, 0x0) 05:38:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10dfe}], 0x0, &(0x7f0000000280)) removexattr(&(0x7f0000000040)='./file0/file0\x00', 0x0) [ 288.892563][ T28] audit: type=1804 audit(1602394724.824:155): pid=19040 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/267/bus" dev="sda1" ino=16384 res=1 errno=0 05:38:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f330000001400"], 0x54}}, 0x0) 05:38:45 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000080), 0x10) 05:38:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = dup(r0) sync_file_range(r1, 0x0, 0x0, 0x0) 05:38:45 executing program 5: r0 = syz_io_uring_setup(0x7a81, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x8000000, 0x0) 05:38:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200"], 0x54}}, 0x0) 05:38:45 executing program 1: 05:38:45 executing program 2: r0 = syz_io_uring_setup(0x7a81, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) 05:38:45 executing program 5: syz_io_uring_setup(0x7a81, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0, 0xffffffffffffffff) 05:38:45 executing program 1: r0 = syz_io_uring_setup(0x7a81, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) 05:38:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200"], 0x54}}, 0x0) [ 289.816161][T19085] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 289.830053][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 289.830067][ T28] audit: type=1804 audit(1602394725.754:157): pid=19080 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/268/bus" dev="sda1" ino=16379 res=1 errno=0 [ 289.914097][T19097] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 290.330079][ T28] audit: type=1804 audit(1602394726.254:158): pid=19124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/266/bus" dev="sda1" ino=15952 res=1 errno=0 05:38:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200"], 0x54}}, 0x0) 05:38:46 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_io_uring_setup(0x7a81, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[r0, r1], 0x2) 05:38:46 executing program 2: syz_io_uring_setup(0x7a81, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) 05:38:46 executing program 1: 05:38:46 executing program 1: 05:38:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:46 executing program 2: [ 290.709674][T19132] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:46 executing program 2: [ 290.809884][T19149] __nla_validate_parse: 2 callbacks suppressed [ 290.809891][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:46 executing program 2: 05:38:46 executing program 5: [ 290.837537][ T28] audit: type=1804 audit(1602394726.764:159): pid=19151 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/269/bus" dev="sda1" ino=16368 res=1 errno=0 05:38:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 291.254292][ T28] audit: type=1804 audit(1602394727.184:160): pid=19166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/267/bus" dev="sda1" ino=15952 res=1 errno=0 05:38:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:47 executing program 1: 05:38:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:47 executing program 5: 05:38:47 executing program 2: 05:38:47 executing program 1: [ 291.674435][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:47 executing program 2: 05:38:47 executing program 5: 05:38:47 executing program 1: 05:38:47 executing program 2: [ 291.784692][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.866397][ T28] audit: type=1804 audit(1602394727.794:161): pid=19183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/270/bus" dev="sda1" ino=16381 res=1 errno=0 05:38:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) [ 292.166449][ T28] audit: type=1804 audit(1602394728.094:162): pid=19194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/268/bus" dev="sda1" ino=15952 res=1 errno=0 05:38:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:48 executing program 5: 05:38:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:48 executing program 1: 05:38:48 executing program 2: 05:38:48 executing program 2: 05:38:48 executing program 1: 05:38:48 executing program 2: 05:38:48 executing program 5: [ 292.724552][T19201] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:48 executing program 2: 05:38:48 executing program 1: [ 292.882152][ T28] audit: type=1804 audit(1602394728.814:163): pid=19212 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/271/bus" dev="sda1" ino=16370 res=1 errno=0 05:38:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 293.101286][ T28] audit: type=1804 audit(1602394729.034:164): pid=19223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/269/bus" dev="sda1" ino=16353 res=1 errno=0 05:38:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:49 executing program 5: 05:38:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:49 executing program 2: 05:38:49 executing program 1: 05:38:49 executing program 1: 05:38:49 executing program 2: 05:38:49 executing program 5: [ 293.736675][T19232] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:49 executing program 2: 05:38:49 executing program 2: [ 293.846036][ T28] audit: type=1804 audit(1602394729.774:165): pid=19240 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/272/bus" dev="sda1" ino=16380 res=1 errno=0 05:38:49 executing program 5: 05:38:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 294.122381][ T28] audit: type=1804 audit(1602394730.054:166): pid=19255 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/270/bus" dev="sda1" ino=16384 res=1 errno=0 05:38:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:50 executing program 1: 05:38:50 executing program 2: 05:38:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:50 executing program 5: 05:38:50 executing program 2: 05:38:50 executing program 1: 05:38:50 executing program 5: [ 294.693217][T19265] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:50 executing program 5: 05:38:50 executing program 1: 05:38:50 executing program 2: 05:38:50 executing program 5: 05:38:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:51 executing program 1: 05:38:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:51 executing program 2: 05:38:51 executing program 5: 05:38:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:51 executing program 1: 05:38:51 executing program 2: [ 295.613834][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:51 executing program 5: [ 295.675732][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:51 executing program 1: [ 295.736219][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 295.736232][ T28] audit: type=1804 audit(1602394731.664:168): pid=19304 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/274/bus" dev="sda1" ino=16374 res=1 errno=0 [ 295.777628][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.793307][ T28] audit: type=1804 audit(1602394731.684:169): pid=19302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/271/bus" dev="sda1" ino=16373 res=1 errno=0 05:38:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:52 executing program 2: 05:38:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:52 executing program 5: 05:38:52 executing program 1: 05:38:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:52 executing program 2: 05:38:52 executing program 1: 05:38:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:52 executing program 5: [ 296.631023][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:52 executing program 2: 05:38:52 executing program 1: [ 296.734837][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.750034][ T28] audit: type=1804 audit(1602394732.674:170): pid=19335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/275/bus" dev="sda1" ino=16367 res=1 errno=0 [ 296.798189][ T28] audit: type=1804 audit(1602394732.684:171): pid=19333 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/272/bus" dev="sda1" ino=16375 res=1 errno=0 05:38:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:53 executing program 2: 05:38:53 executing program 5: 05:38:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:53 executing program 1: 05:38:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 297.596112][T19354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:53 executing program 1: 05:38:53 executing program 5: 05:38:53 executing program 2: 05:38:53 executing program 1: [ 297.679916][ T28] audit: type=1804 audit(1602394733.604:172): pid=19355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/273/bus" dev="sda1" ino=16368 res=1 errno=0 [ 297.687286][T19358] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:53 executing program 2: [ 297.785459][ T28] audit: type=1804 audit(1602394733.714:173): pid=19365 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/276/bus" dev="sda1" ino=16365 res=1 errno=0 05:38:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:54 executing program 5: 05:38:54 executing program 1: 05:38:54 executing program 2: 05:38:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:54 executing program 1: 05:38:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 298.651805][T19381] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:54 executing program 5: 05:38:54 executing program 2: 05:38:54 executing program 1: [ 298.747253][T19386] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.765450][ T28] audit: type=1804 audit(1602394734.694:174): pid=19387 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/274/bus" dev="sda1" ino=16375 res=1 errno=0 05:38:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 298.882098][ T28] audit: type=1804 audit(1602394734.814:175): pid=19397 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/277/bus" dev="sda1" ino=16370 res=1 errno=0 05:38:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 05:38:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:55 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpgid(0x0) r2 = getegid() sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002"], 0x118}, 0x0) 05:38:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5452, 0x0) 05:38:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 299.704426][T19409] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x3, 0x1, 0x801, 0x0, 0x0, {0xbf99bebf43601cb8}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 05:38:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x86) 05:38:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{0x0, 0x0, 0x0}, {&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000680), 0x0, 0x0, 0x68}], 0x2, 0x0) 05:38:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 299.798641][T19421] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.814909][ T28] audit: type=1804 audit(1602394735.744:176): pid=19419 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/275/bus" dev="sda1" ino=16371 res=1 errno=0 05:38:55 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80402, 0x0) [ 299.876801][T19430] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.897347][ T28] audit: type=1804 audit(1602394735.794:177): pid=19425 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/278/bus" dev="sda1" ino=16376 res=1 errno=0 05:38:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:56 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 05:38:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:56 executing program 1: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/49) 05:38:56 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/4090, 0xffa}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080)=0x910, 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) 05:38:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:56 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x84b80, 0x0) [ 300.702073][T19451] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1d0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000000decd"], 0x14}}, 0x0) [ 300.777613][ T28] audit: type=1804 audit(1602394736.704:178): pid=19456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/276/bus" dev="sda1" ino=15922 res=1 errno=0 05:38:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:56 executing program 5: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1228, 0x1) r0 = open(&(0x7f0000001640)='./file0\x00', 0x101082, 0x0) write$binfmt_script(r0, &(0x7f00000036c0)=ANY=[], 0xfffffce4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 05:38:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) [ 300.899926][ T28] audit: type=1804 audit(1602394736.824:179): pid=19469 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/279/bus" dev="sda1" ino=15825 res=1 errno=0 [ 300.958688][T19475] x_tables: duplicate underflow at hook 3 05:38:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x9c, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x13c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_USERDATA={0xdd, 0xd, 0x1, 0x0, "bcea50dbaad14d33f8669544d127bf5d0e42c9fbbbdf5843faf60fa3dac85edaac84a45e7b161aa09791c034f4fe9a75842218ce14191679ce8d8a7cb1f5bae00e579be272cfe394f630a537fabd78e57cc23b5684c829671f1f562ac069da42a98f7f9004cb34c7e0a60d216e4dfb3fe5b03c23807cdc054fddb6ad31cd614d3ef21e5eca31474cf01a785a309c46b1b1106afc2d7cb69654d259c450929ce4d241f09f7449e1526c4407a35895712db774f60522bd1c85813c6809232adc2b5f15d5a7243269ebc263f718511777bab5b5a2be5d5b4726dc"}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xc3c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc14, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ffebd52b50a1756036beda59681f17446133aebd7adc28868f72e271022b5a332672a22bade254b8da744eb2724cf1194700dfb1ebd1cb8fce3d8c5b6d0771f36f39700e5677c6d3c1d5b7ef36"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "47033e4a8bd3b478c7c6a5b5dd36bd2a92823d653f098d03ac65b8a00e4c83fcb76c576f1a91008ea9"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x35, 0x1, "721749ae1978f1f1de05b8ae02321b8ad2a56264af4ff4006917d93889b98a14be0a6a394062a6d072b80b037c5a7ef8ad"}, @NFTA_DATA_VALUE={0xf9, 0x1, "562ccdd5750c66fe8bd10bd9a8594c00d4f196dd3c31313fcd495137818b3f0c632396272c4ac92ea610de991eb06eb931894c7f8f91d4b4d1249f91d5cf610a5bd2ed26b94c29ad12be5c833b490dca466506def8b7d9a39e957dbc5b0e16b207386ba2ad2d671d67004bcbe6e22bbb39e4a30101f163ef93367e67cc9ac1cfcff29512fa2f17556e927dee1aa57404d469804b422b0779ab7dfdff0249ee61eed3db5b30e3fef5bedfe6bf4dcf5410313d6f08dba03ef912eb1ca230b472d230509bad2ad8444f44e36cccd3700d8b6cfe10e22482548df014aa459633cf1ca6526909f572e3b267c274642cf6bf3c9dea3b7b8c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x29, 0x1, "13476be15add0e28c6eb739b0f7c601b9b309b760b5215792d7dc539d3088ff56fd3731afe"}, @NFTA_DATA_VALUE={0xad, 0x1, "fbb2acd13224e593a592cc2902beb6ea0787a76fec9551db29dbcff8c9a42efd3ac3945bf04616fcdfd969581992ccc593178d0473713e8e4dd1f6052aeda03da8174695c557e7b11f4ed11459ecabc68c7433f2e65d6cc00917d31784238257d3c6cd861b56d1940d46f9fd2a729302481bd7d6f24d3f98cbd17c4f515bacbeb81e38e8f1a9f9add5fbbb9c52865dd3feb718e89d08ac92f5c3cb02063b824ae86abe541adea03f37"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x174, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "0eb62ccec13525be3e134da888d93379753572fd777213483e1bdd8f0bb110cea7766234c876ab284662f6b4003f72d715df7405275599a455bbb03416bc4fb9902396ab8c149271ca516bc82910a1ab010772a251de79a6a8314b923163d803aa1703ebdc793d4c28c6821af62420304a2f6d099ee72b831c90e02a85e948f138433a7fc5a0d983030213421ff69596ffbc024804ea34bb7ea4115f310c2e979536b891d3d93ad1de154564a7ad50d4df329909daff3828c98439b1754644c81054bebd81ff7ad8f43ea3885e07fab61ef56d8d8711cdfaec"}, @NFTA_DATA_VALUE={0x8d, 0x1, "6d2bd2d8d3219834df33b40ca140c802088570abd73e9ab04bc19f34f652ea224d750fe58e30c31d44ce7d18b3e4da4b0bc329fffe12d1d2e817589dec6b45ff4ce543fd6a7582f56dc1706b7f1f5b5664da457eda1ae0b51eb945a81bc3b4d6030c9eb0a31291153180970084192540df72b11c57d561ffc40b97663653f17e642e107502019bde50"}]}]}, {0x6bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x655, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14}}, 0xec4}}, 0x0) 05:38:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:57 executing program 1: socketpair(0x2, 0x3, 0x6, 0x0) 05:38:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:57 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x56}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:38:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005940)=[{{&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x0, @loopback, 0xffff}, 0x80, 0x0}}], 0x1, 0x0) [ 301.765174][T19491] __nla_validate_parse: 2 callbacks suppressed [ 301.765182][T19491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 05:38:57 executing program 5: clone(0x42400, 0x0, 0x0, 0x0, 0x0) 05:38:57 executing program 1: socket$inet6(0xa, 0x0, 0x74a3660b) 05:38:57 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, 0x0, &(0x7f00000000c0)={0x77359400}) [ 301.818771][T19491] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 301.842950][ T28] audit: type=1804 audit(1602394737.774:180): pid=19498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/277/bus" dev="sda1" ino=15950 res=1 errno=0 05:38:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:57 executing program 2: io_setup(0x7, &(0x7f0000000040)=0x0) r1 = socket$key(0xf, 0x3, 0x2) io_submit(r0, 0x1, &(0x7f0000001680)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 301.961791][ T28] audit: type=1804 audit(1602394737.824:181): pid=19499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/280/bus" dev="sda1" ino=15828 res=1 errno=0 [ 302.014065][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.041172][T19515] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x80, 0x0}}], 0x1, 0x0) 05:38:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x795b709f76e75a48}, 0x6e) 05:38:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf0000000000000000", @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:38:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@timestamping={{0x14}}], 0x18}}], 0x2, 0x0) [ 302.753632][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.764875][T19534] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 05:38:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="af"], 0x54}}, 0x0) 05:38:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:58 executing program 5: clone(0x29251280, 0x0, 0x0, 0x0, 0x0) 05:38:58 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) [ 302.793132][ T28] audit: type=1804 audit(1602394738.724:182): pid=19533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/278/bus" dev="sda1" ino=15810 res=1 errno=0 05:38:58 executing program 2: clock_getres(0x0, &(0x7f0000000140)) sched_rr_get_interval(0x0, &(0x7f0000000180)) 05:38:58 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 05:38:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0xb, 0x101}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 05:38:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 302.965426][ T28] audit: type=1804 audit(1602394738.894:183): pid=19552 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/281/bus" dev="sda1" ino=16259 res=1 errno=0 05:38:59 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 05:38:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:38:59 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) 05:38:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000007200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 05:38:59 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 05:38:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:38:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:38:59 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x82, 0x0) 05:38:59 executing program 5: r0 = add_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="ac", 0x1, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) 05:38:59 executing program 1: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/220) 05:38:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 303.823684][ T28] audit: type=1804 audit(1602394739.754:184): pid=19582 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/279/bus" dev="sda1" ino=15953 res=1 errno=0 05:38:59 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:38:59 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/cgroup\x00') write$binfmt_elf64(r0, 0x0, 0x0) [ 303.959010][ T28] audit: type=1804 audit(1602394739.884:185): pid=19595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/282/bus" dev="sda1" ino=15811 res=1 errno=0 05:39:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xfff9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 05:39:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:39:00 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x494602, 0x0) 05:39:00 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 05:39:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:39:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:39:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:39:00 executing program 5: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x16) [ 304.813064][ T28] audit: type=1804 audit(1602394740.744:186): pid=19614 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/280/bus" dev="sda1" ino=16305 res=1 errno=0 [ 304.837544][T19615] x_tables: duplicate underflow at hook 3 05:39:00 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) 05:39:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) [ 304.927664][ T28] audit: type=1804 audit(1602394740.854:187): pid=19624 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/283/bus" dev="sda1" ino=15953 res=1 errno=0 05:39:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='macvtap0\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x202c02, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f00000000c0)={0x1468, 0x15, 0x2, 0x70bd2c, 0x25dfdbfe, {0x34, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "b0cd519c1cdb665c24d8a9935ca8868cd662f3257a8b1db3a4980a536c1d3dd5271aa8bc9e368dec9879c203005fdc4ccadf8c0077d00c1bfb3be21228bd6dec46c1857726a6123da346ed9d971735bdf42dae1a253d5edc6528839d4d11b2c423e7edc9a37f9380557d6dd2f4796c4305df4a412f36766de802423ee12436cc4d420a48c8176e4519cb24317773adc8f130db2e6aa14fa685c96c02e0a68d6c45af9379774bb49fdedade20f3e8e1036e13baef598c64321dfb7e11e8f5e9385d135a32988b1b1faf58c28c6d9c2f4d21313280c4f569f7bac1cf41bba2be4c3cd247a1310f4aa40a5a84b43bf896"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "c2170c9e61eab1c0f93a97cb6c08dc25a3a65934cee9990a34a11e959cfe82876eb8e6f599be498d822046720328656d24c23104b790385e1255403d9bc59d0b2e57ac7b71d5c122c71688646d79d2f74048926f422bc4a9cb062673f21853ce7a39669ec8036d43c3a078ae44ab715506fb88bebb5f3fd427193e60ec23acd9a05a71d7a0c66fe2de54277cdb3ba62cde2e454a8722474e7dc8abcaf0a5569ccf6e918be6d4"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "f7ea3405ef0ee0644ed56877e60b91825594ca5f885b28d65f9749366fc5bf2f5bfc503c046029cc6ad54c407440e75cd8fcc74e75b7c36a20bcf617c68fa2333d3bf5bbc063f4ed0515de3b45ba217ba36134eacc967333d05da20b9168e04fce66e639a1f6c79960ded8e5d57baf9e405b18042994299970cc0ea81c99419711c64335fca43cf8efb0b37a72283a36cc79e9855cd3df38228e73fb42a0dbc2870865811366263f79"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "372b0142694d991c8afba3ae2466bab7f4c48e342f35d75d3e485c5f15ca5077dba16925fd73ba9f21c90ecb5d11fd405908a8c1e3678cf3eb9aa3c7cebe2b1e0609dbb37638f92a812d994a04bc690e6d4f68cbfcaf0d12d879846b14bd1570c65712107263cc7408e7eb23792aaa2e79701f3849f309b0a643318cc2a2b2cb9f799d2b87b372492b0ea8b77076418d2a6621c5dfbcbbd08e8f52346ac58e81"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "67e9be5907f684c8b1ff"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "6b754d12f1508bec94d6f30abec0729ed313c21871c7cecf0dd8c2f973f3a31f4944825bfc3aabd869bb72ca918b399ef35efec8306c5539be640c7d6daaf9cf01dd39bcd7ca6b924ac241085baf27991f04882a2b67b471dd900c400826e510a6ceea7494ade3c6855054f34616a3e71cccf7fd92e9e23611c27b0307d649c0a4be57b1016cdeb2523bdc1ea6b4ef3a130764c05bc68fe5468f8c7fdbd3"}, @INET_DIAG_REQ_BYTECODE={0xff9, 0x1, "f142160be3dd0085a336463615acdadbe6c72fb536c4b471c968176dec8b2f6827c04b92690b1b9c1cf9d8a465e1516cb3136a16c92fa6db20c909b6f9bdd04e56f73539220b7dcfbcbe954e4e47b7638cd98ce65d3779bd447195a6eacb3793c17fdc905a345565d97c62dbc742d4e55b27bf51acc332ef5afbc5d3c79f7d9764b23c0eb769b1bfc0c1695ae3b4643f5214003a7a9cf9aec04d4c9d93e16414a66bb2105b39086eb258778f4335ae975ee25bd4729a91a8ee95501e60b9646602103d2f217bd068590c507a39403fb7823dca7c071d611a377c13472414bca8b10d5c0a70478ff5ed8c321c9fdce1e525fdaf7f8e15c3e48427c7566153810b7b920b54857ebb8dc145208ddb5564105b16a9d1c3d8a28fbad26c1d9354f5373bfc927f2d11661d97c7dbd10c0e553e3484d149d2c214c45eff606597507bf53482d29535cf38828e970203e17aeb6a995ab39e478f5be59ab96da26026c03bcfa197a257248f8bceb6d5621af3b323b73aa987bed3a4759e236f6b8c6d8606721ec9721c4b3dcf1ae2af381cf2ae264fd5297d9be1d0d284a07d252b7243b773bcd98fbc4eac65545757b386513a6b0a2a34630f2c48254833f6e30591479fe7eacff0aa65a44f686033233222d1d62dd1e04a07e374445bfd2c9abebc9c3bf12d1533387ae7f3a6701a07a622ddec1406471a6f7dc4fc9fe65c34f9d998b8af918ffa41d01d1e94abc1e65ae97dac722f04e9e491bfc3b4a755c75bc6c9f9be3edc2f2117cbe9a65eba88ea8a5287211d32a342a8156df4e0877f9063c057aa12372384aee1ba784e3a746cfb10d6bbc3671925c14f13568256cd6d4d26dcadaf66967c4815fe1ce1ef834f3b01a603fe56cd660b9559f3e523c1ed4a5bdae302cc1292da70c06e76c7d54cdeda391add3492a1c3265e982499a8f5ed41041d840e4b8919b08c9019efcb6ce2d5d091ffa337c7350cf0d6e9fd427fbee5fcebe6ba8e97659122a1aa0ebe25d977a3c6a73b7bb4dc55ff4a2e33fac3b0ba358869df97b4b8a33505c5570f4e22fbee50f2688fd03128a740f20eade80b368358c616a25478eb77541776a069a770f79b0b650194d2780bb4e4ca219fbf4f80bdb05e2664b5f918d005218f089b7e4c3688bbe44c83310265b9a6de9ca63203957d28a3ead19d02fa27fc275c7149e5545992c538479365e23fa49bc7ed068c69c717ec98e14f1059770f3222d15d82f35780296e1ed8d0d088ff82d744733da2957e83decc292c20ceb62fcf43888f5fb54b9fd5a69ecfc0cedc5e25c7d30ebbec736a62d946b5f59b277a22e058da5fd12356dbe4ff4b45fdbc50f12d1ea47228a1fa5b57c1daa6ab4b183632e19c36956d79623bda304511159b2babdfeac1901958c7f2ac70e1f96650ed72d6090bb2e77b79848b27d683ea838192d96eab2a8225de7c977cff98a695ff227740ae8d2a26ce9c9d34aa4bfa7b32b14758e16bfc10673822e16ce708fc4370957d519dfb660ad9fa5516fc9fdf4ca4d6707a4bbbf35e3476d87380c04c017a93470adc979820afce3de9565bf601f52af977e353d39555662711a325ff84459a79bb6eb0fc7e57a403b8ae3e6bf9eccb1bc0cf86a1403a077e2f8a10e90d29cc945ad538c12cf43a1d0da84e47938f9a33a296d8d04eb661161efa43485a369e8fd12306982cb1ed9c374c6895c849bd0589c5689f9ff1e21c2d34800b8cf3d321a3c8f50806f1b0b4bfca6d3962910cc59f03a70053d3fc48a60de6627906e5f9c7f623bb1bed5044947ba25b3d2e76f48e19fd709529111b41c54f576657636a6e4f62495aea6d6d66fcdb2553e41e6227691cc18c60bf3fdeb90a1f55a9540eff1de6b0edbc376c0fa0e2ccadfea61ee73135af1fad0fff1b6e0bee0247932762e3db8b2587dcb7ca812da85738fdec0e217feb100c2623545ff7c59e72ecc604dce5e8a60e611a0cdbc4c5bed4c557291a9415b278707409d93e4606773802a47bb4d325723c6d37d569ad90402d611183782392caf634440ad0abb8dc75ee8d345c1117e11b4355c3950a3660c20857e90f9e797bc24613477e8b6626ccb05c0aeed7be77c2b3a42cb7584fff3076b7224cd4d52f1ed18376fa3d7ceb216c7aeaa37da6f2a3bd17826c0c2a4d14a1e63a60859562a346dfbcf5c43c9508d6c5b170d85594755719fd15418484fcd5931049bea01cc41419b1151157358055f794e37efd67900550f45436cb3493159e1975aea3992c196675f0cf3e8408b1d0cfacae34aad4e58306f18d81dbb63e52e508ba08bc03db4f70162ccbce79ab7939484d88ae40d16f4eda2976e5cace3101ed4d20c8efcd0115d80836535217f424809fefacce8670a9b88aebdde7b34e5f6f12089b4aafedf8226a272388383ea91b99d26108df8ba000d1a0e3d5ecd2e108f2677d082de77bc21a50d0da7e7707e68df61e7f7af552b2787732428c80e3ab2f11c5f6f13eb516c5821c938b4cf0e379c80f4c2b79d2bd8dcc161ec30253baf1330808c1b75acbc642c8dde6c4edd38c3782ffda924851be0efa9b929b2d500fca37b0a28c9a08a13557a69f9e88184fb051d083de86eb77a264fa1f599f953652fab037123756ce3cb12e5b0cc1d4919bf3dec19408d12dfeb57896cbce3f41d846c616aad35d57e4e446258db52e63a4762a6ad82b956a11e931a01595fad4ae48ed1f8a796e2fd3caf3c9eb18b1da0a5735ff6de3e18607dc72394829d49f4cfeace9f47c97bad27e054a962aeb9599e55315311ba07aa325109759be952ca5f9845d3e82659f438da9dac9b8c9ae00c8971509ab4080ee152703980c1d9905679288533499b9efb034e60834b7d0a14d332ec6a763a605b07ea50fc4137644bf449135497d766a4205abf85f64d2d24f4b5d844d65022704d134d0d48c4d08f9c9132111d3b8e4daabf89c8a040e878ceb55ce43f358a065ce5dc2ea5dee7fce2254f9d8c36763c4d0750afd1c3b28f5b7c7ba7f43801c515215956c476af33e3abe7d8acd0ec3068b3e473ba795d64d9de013c014e1dbe0bada35d773cf7f688a431bee3ced9f913f2835f814f83c3e4d3e13dfaf3a6467e092e360c6547437709c745eb31f0a0f8e4308f5d8094a21e32fefe609189689bd582f9fe4f4529dc1a38648486b491cd18ad0a10b1edbe6caf3ac19abdb840d5bdadbb706e977f096992ae1b477d4402d1c2818ab0c45d4ee03310cbf8497d76482457847c06cecfd2026e8128bca8ee8bc4f2b5de5d84c9ecf31361b1d593f2fd88c0051cb4fdb7d32d94667b5d20282483bb761826b8774bf65d4894bea26672bdc48b915d47d7d290be409757434f10000000026feccfa9b26b766907e8188d3c8c5ee504431b66f2285458549f937170269f97eedf219cd06ce48dc085e99266b984a71cc87ef297a1c624a39818058634e27232050ec68ca0665df519ab099c7ca2f66f3ec755f766aaeebeb93c2ec54b8f2614853f804a4468bb1d483a659114837b04f10378e034c3dedfdddae4b0d5e02886a7c0799ce1cb259557abde620cb76ba66c805556d1a497fa678d747f28d921040acef037c0b68bb54477a7546fdb8f70af1bde37fc9c791039c22faac310ee0a5bf022f3bc763b5b0da254195e55703de5da9dd5196d55eab031af99155af5294e7f186de1ac756cbfa051b54595067eafe10c8f4ff8e79fc1f0c706093195b6307ac43d0e5425d30e5a32dd0d3842c80322d97c1a08f8f3abd88886d8a1b2d08eb8eb60178b6053bdeda862cb6b35735b170a6d1fdb8dcbe6d6e7403b007df4243c03ca7f242a4e6418e6ec8a32210bb96e406585babb430deb9eaca3c3ea958599b22e5a08311758f72544fb85fc1ed95b8dd0dfdecf04b4f182e19ceb7b7e322812d82f1f5c023870a0952ea95a3f3de34c3b2f8b30719341c55aee6860abba8b8e20647b14964612f2b72cbe28a836b1e060218ee21adc989e15d1ac0f5112fa037607e666388778333acd28164f5e3860432e9a95056f7fd725a6c07ddf6b0983f26422a801b6893919c96f8172e34ff65963bd80242d4b384255060a252e8a75485486127d32ce3f9559d0eaf2a2b3c46f5f584118f6700c18610035db98184f8e69d1dc26881253d5a6f0d6369bf4d112289ed766b0f682571531edf337e6b867b4f7ae1e8a376e3e937a1222ce9a7e63a73eddeca9da71fec4a2bf5d88085354a89111ad6b5243f34c37456acc1531a0fd8ba501844d74e5dae51862d86e029aa94ed156b67b162679b4e101a324aa54ed2dd5d8b2aedea5bed9b2f6abd0d9bb79f6e137d83e3084142a9735f739a1a2b5940b6eeaaede100f5713c9bcca2ce5513507c25fa0776df3bc90b02b09c1990dc860031a42adc88268f6885c05a406afbeffebe71417c18d3444ed08342a880d3322efc27d04fe5e3106e5d2becf76f87f9bb820b9b4487c2725b4f84f788f9454a90639a8f98aa30c24f2a0f834025529f6163253d5f6c892afcee0f30d68dcd8ea3a182497b08557528b8c210b5fc2199b56a6b9de12290608e3fc797c6e982fbbeb2562f8509db12a2028d0650cc7dd11dc46eca77f37077ac28051746d5da184cd85e3e91ca4ff07d413b785593c6def52ff2cb0405110587389d2db2276271ac82d9dbb4126f7a9153db6ff1989177c39f1a98b68d7dfd56c54fc466f662539ef2366ead447feb01cdfa9680bbae6bb64560fe3d9960b65fd253aaafcc42039bcb3d28204596f2ac2e84de1f0a859daa883cae7dc71ec98247b9840c391e020833dac6ef639fde00f7896549f0311c96902c52421ac76d94d97b32ef105da9a7850bedf95f48b7c4f5e0aa570660a9d308e6cd3c6a2b95b833b113b629cea3f559619897cc736720ac864e5719b84da90b3414e512016ca35cb827a6f1d424dc8a1defc3318233b377e61b1d0f4baacfeb95508422178b3ccd3ed3fb45508e6084c52f5088f6cd302dacfefee4f39d81cefd9c9801d8b35a3d8f4d9bde803d4a0597183c5724f03905a323a801a244594ff9bdc4ecb391a77afbc2a965856f416146398500b972d6d64b840fef087d2954f975a270b9d597c32015a65876fe83fa1daf5ceceae7e3e5b27d5444b9586e027d9f8fbc93a60ddf78292cf2e8e328d47626096a624d344055543caba731808c16e207320c133d7391a490a230e80a407e0d53378b0409607bba7592f93b348d60da7733c35663fa941a798df17eb118cc61669addb06b11c238a4ef2fce2b4be74ad1dc83f9c9236fcacf49af972eea90a6e726627786a4dd82376e6e156359db0e697b2efab5e567b54c517ef84de4b2f286c1249bdab3f2bc3f5e828ccc72963f041778a5ee76006b1c4d4449bd7835a8b5a3783acdb7b22f009c6a0d2bfd61f6b07e7ec6a0fe559434804b8e2736a234b02bbe2cf578669bdbee9259e90855558892a840f2613617d33c75a96d376b2d76c521b56df1711f811264a4b7b665db48de31b1fe3624fae84e6ac1be69ac82426c2cb48668b9128404bb4b9eff4624b7fac327871d0ee0380a12603e0de62d6b3fbca6b3eeebd65c0a2b16ca05fca60cc9adc76327d5813f53b104c1d137e91625b08a742c7ddbd4fe9a2b9db421ff3b2c8a41504a11b9c2093820ff47e27777241e9ec136b749460138bff5d89116b2d41fc2bf3e68d362e2c575750c2de4f437b799264b9e9a666007a8c7f1da0b531e59f10f42d49f4300"/4085}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "a27318fd8aa65b1a5d2444f4351de154c0c5a566a9bd006a2a161bb9"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "0003a1de2b3b23d2087b91deb59727f9df7c4623c3a89347daed764d87892452242baa19a5bc73a720d75429aa8170c48e0278d95d2a77c2a5bb6547fc0fb5d405a31d6490de9ff6aaf8cf462eab0dc97cf12d6ef93e905e0814aa541b289a3a2d9d34e05db5d1004eb06bd63d91e14b1b9ca8919ad2d088da5f70d02374fe23ab59695b0a34b5fa6880a3ed"}]}, 0x1468}, 0x1, 0x0, 0x0, 0x4008800}, 0x800) 05:39:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:39:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005000)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e23, @private}, 0x80, 0x0}}], 0x1, 0x4004884) 05:39:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0xb40, 0xffffffff, 0x9d8, 0x0, 0x9d8, 0xffffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x8b8, 0x918, 0x0, {}, [@common=@unspec=@u32={{0x7e0, 'u32\x00'}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'wg0\x00', 'team_slave_0\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'bond0\x00', 'wlan1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xba0) 05:39:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 05:39:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x42, 0x0, 0x0) [ 305.799543][T19653] x_tables: duplicate underflow at hook 3 [ 305.806776][T19654] x_tables: duplicate underflow at hook 2 [ 305.814623][T19655] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 05:39:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 305.829803][ T28] audit: type=1804 audit(1602394741.754:188): pid=19652 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/281/bus" dev="sda1" ino=16378 res=1 errno=0 05:39:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0xfffffffd, 0x4) 05:39:01 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7776c0de62f18c71) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xc) 05:39:01 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) [ 305.872785][T19662] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 05:39:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 305.941858][ T28] audit: type=1804 audit(1602394741.834:189): pid=19664 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/284/bus" dev="sda1" ino=16307 res=1 errno=0 [ 306.021414][T19673] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 05:39:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x610, 0x118, 0x118, 0xffffffff, 0x118, 0x118, 0x578, 0x578, 0xffffffff, 0x578, 0x578, 0x5, 0x0, {[{{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'macvtap0\x00'}, 0x0, 0x2a0, 0x2d8, 0x0, {}, [@common=@unspec=@bpf0={{0x230, 'bpf\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @loopback, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2, @multicast2, @icmp_id}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 05:39:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:39:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0xfffffffd, 0x4) 05:39:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005940)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0) [ 306.760889][T19683] x_tables: duplicate underflow at hook 1 [ 306.783216][T19690] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 05:39:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={0x0, 0x3268}}, 0x0) 05:39:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 306.801916][ T28] audit: type=1804 audit(1602394742.734:190): pid=19689 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/282/bus" dev="sda1" ino=16374 res=1 errno=0 05:39:02 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7776c0de62f18c71) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xc) 05:39:02 executing program 5: r0 = getpid() waitid(0x2, r0, 0x0, 0x4, 0x0) [ 306.900912][ T28] audit: type=1804 audit(1602394742.834:191): pid=19699 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/285/bus" dev="sda1" ino=15953 res=1 errno=0 05:39:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0xfffffffffffffffe, 0x0) [ 306.963322][T19704] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 05:39:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:39:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:39:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:39:03 executing program 2: clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 05:39:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000007200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0) 05:39:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 307.721965][T19724] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 05:39:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e21, @private=0xa010102}, 0x80, 0x0}}], 0x1, 0x0) [ 307.778576][ T28] audit: type=1804 audit(1602394743.704:192): pid=19726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/283/bus" dev="sda1" ino=15953 res=1 errno=0 [ 307.799040][T19732] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 05:39:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000002300)=ANY=[@ANYBLOB="b8100000040805"], 0x10b8}}, 0x0) [ 307.826601][T19732] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:39:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x130, 0x130, 0x1c8, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0xcb3f42b6e9d92b98}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wlan1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'erspan0\x00', 'wlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'macvlan1\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) [ 307.880087][ T28] audit: type=1804 audit(1602394743.784:193): pid=19731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/286/bus" dev="sda1" ino=15767 res=1 errno=0 05:39:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 05:39:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 307.934399][T19738] netlink: 4260 bytes leftover after parsing attributes in process `syz-executor.5'. 05:39:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12001, 0x0) [ 308.052381][T19747] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 308.074467][T19747] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:39:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:39:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000002300)=ANY=[@ANYBLOB="b8100000040805"], 0x10b8}}, 0x0) 05:39:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 05:39:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000035c0)=ANY=[], 0x3268}}, 0x0) 05:39:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:39:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(r0, &(0x7f0000001640)={[0x8]}, 0x8, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x50, 0x0, 0x2, 0x401, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x5}, [@nested={0x4}, @generic="fc37ebcacda0bba49fd4203b9a3b6088a1b6a8cc2965965612d86cf66317293e341457d39083fa00f7b231a386f9a7f98a3e", @typed={0x4, 0x45, 0x0, 0x0, @binary}]}, 0x50}}, 0x0) [ 308.741623][T19763] netlink: 4260 bytes leftover after parsing attributes in process `syz-executor.5'. [ 308.751182][ T28] audit: type=1804 audit(1602394744.674:194): pid=19761 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/284/bus" dev="sda1" ino=16372 res=1 errno=0 [ 308.757117][T19765] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 05:39:04 executing program 2: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1228, 0x1) r0 = open(&(0x7f0000001640)='./file0\x00', 0x101082, 0x0) r1 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "99f9ceb1f19b6fe4f5bbe50d62e7"}, 0x19) sched_rr_get_interval(r2, 0x0) 05:39:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {}, [@generic="cf"]}, 0x18}}, 0x0) [ 308.851462][T19771] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 308.869024][ T28] audit: type=1804 audit(1602394744.794:195): pid=19768 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/287/bus" dev="sda1" ino=16374 res=1 errno=0 05:39:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) [ 308.879556][T19765] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.900010][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 05:39:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf00000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:39:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000e1c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000e180)={&(0x7f000001c200)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1e9c, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1894, 0x3, 0x0, 0x1, [{0x128c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x1001, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_KEY_END={0x74, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "70e7c04451f739bf0da4225ae5dc26512eeeaa238d01b7b259a4949ce1c48ff2fdedddb7e94cc2c7aad19fa116801b9bafe637ae6bc05608a9597b337d259101d315b5d3f43f110a841149f420bea86302e6d38247181f6307b0c99427940b3b402924f184315315f6"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0x1fc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "d19794d0c5d40ed6fd627aaa97fc818f6be205b1c375c6ffae80f2a6de92ed47370f2523ce99e7afdbb372e85d91e81b1f8e7e127413e87da354f3edf8bf4e1b35ffb5cc90a9c6200142678ac53275ec0e505136a64d958b6d4e4a44f8c74ae5124c1e6e33da855a76b9fdbd1669a9f1a6cb3b1cad1671370a5a1978a0c58b62688d7b0743887ac8656cd3a8537ca7d9cb1cd8cc023c0c01c6b3f54edfe0f4885b0f71a1f3b174c743ce3eaae69e459468eebb781cbb03e3f594341f09560b0a366fa243a9171ac575679688fd7b0dcd4c608bdac71372ffff6df9df4daf701b314ebff8c8a0f1c855c3800c765f86253c792c24b9"}, @NFTA_DATA_VALUE={0x19, 0x1, "187b9c42304be36dccdd538a54ddc39e2dea41f362"}, @NFTA_DATA_VALUE={0x29, 0x1, "21868300773127e72200f36bb047220b6adbc6342c77817c1f5e3cccb49fa6341577a983a8"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "810a23b9f8026cb0f64f0d8be02a5d0a6d0d844c15c1ce5aa7be76b057aeb0587b147e1cca"}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "eef1cbac9e519f38fd8b9d3cacad01d1d24c1d6ccc1eb6dcd611b9c4c4b2caabad1501495484b627c893090059144514b540ee1f5eb9f52d7b43dfb67003f4af2945c82495c38ed6060e54b9c549896010d63a1a6b2d7200fc085459a8d5965f65c4bb27754e6dfc5c736e90fb912fdf325eba27cd15b5e015c58c24798218d60bcfa7911f1794844af1e4e35247152dc43e57ba1d264d43c816ab742a63eca329c69ba656b63c3a0bac91d65d68f784fc71699736"}, @NFTA_SET_ELEM_USERDATA={0x45, 0x6, 0x1, 0x0, "f59a2c696e1258455cab077e2eb235784e332c53d8f4f3804ae11d8b3f7461819fc8a7015f61fa7c0b63dd04595c8a075a1eceb19ae29e434f40c475aea358df38"}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "ec9e310273795bb3ac0735568ff86a741a38b3ade3b85bea4bece3f82e864457dd55413e8c17367f56697df02e4fd2ff9495460c5adbf90a0420ce14e715059f1d36912a3747c2edd4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x65, 0x1, "e2a33fb26b746e4bfef5eec13734439bcd88373b8103fa919cd812ab6998e947049f0e8e2c1642d7dc571846071844530eb16eaaf22c8a32fae4ac566f35ba697d8eac8378517dee4081ed64c99197aa9e07e131182553bcceaa1ef8ec98ae5ddc"}, @NFTA_DATA_VALUE={0x7d, 0x1, "7d340b90d87effaad294b51be8ccf90d096a29ce893e7a7b1bbded3cb65491e2e8df3c760655e0255ed998544050796d7e53e098dd29202d232c0df30e15c732fd8baf55af8bc5f900381ba928f5847e6da50aa107854778fffa6311b850c5e03760aeb252d544ba073504f197082bb49c2041e54e7f710bea"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x38c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x49, 0x1, "7fc5ff300af101211f3ddbcaa61b5a1c0628703bb6eb42d01ec7c29da7bb6586e2052c4ee8dc54043d14da17fe93061275712daa5532ee2c6445c5024e8e73a2f3b2d5b879"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x55, 0x1, "285a7e577e8f35f3b341618cb63537004bc44cebd716890c4d5e937c6f18c63a5c7c2820775936b7d3dd3efa724e6b48fc00e977ffb886282d46faa9fa9ec30a1218b1c05c42c48cb6ab31cfc26253d3a3"}]}, @NFTA_SET_ELEM_DATA={0x270, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "8cc5e6605fb729d1c5b992a70e88c690dee0f7edd53fa4f4210b3cfa9bbd0548e7b07adcb14d4d90da0b602a3570be5a77c47dc95517f6c6cc33d3346c9638045e04cc04ac7acea6bd24ae819755173eb267202ddc941fd4a5938a3e330e5c5eca8c3c7ebba9af6bb9b493faca79dc303488172dad75e28dbd3681cfd132e1f26cc60b9aad472f51d309907697d67ef2cdb3d05014600cbc985c71fb19045171a0fe1f203fb840edca42946d1980965f1f60a464be"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5d0, 0x3, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x250, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "14a120340cf62a2222d1c4b474e747b47757eac921aa0216cd727225c4644c12d51792b4e6c6913d852c72ee273d656fbffdda4abff7e695caa33793eb3654c75aecb2a02e4ee3783fa2203cf2f30f2485b8d1fe0050cccd6778d22b007ceb18bf3766c9a0e766c31e7e83e9f260aa982b4625356cdde3abc8f28a732b5cc5588d32db87b114d6338ecab313ec7ce3b1b52913b4a2c8ab1ea38f580f4f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "3f80b8007e5ef21470f9187786c5d496eccf4d1f5565e7f108cf4e7d0eab34579cf0984d73956373f2f8cb354452ab5f47fca610f32f9f2d3ead8da5f394a71ebca885ff380c24c3033ca7dd4c468dd51a03150a52e61412a414b31fe587ba93a39b128be70dc7e7a215ebc7bd00588453379919e4babc48261a4c8504d135bd63066bd7d7f7042965e765f48b78217fbbdb5c30ea0a1f3c3eb8ffebb9bfaa11f20827bc16afa9186f08f8eb901babde5010bfff3c2a1a29589442e749367199de0095fb1f1ae9a2a52b2b6ecf7ebd439e6531a9f4"}, @NFTA_DATA_VALUE={0x45, 0x1, "c3c17de60db950ab525b79d78d7552f50dd9cbca4e206b02cf221339cdcfd229c3639d8c96002aa52cc71bb77d9cc801109ed98ce824c86c7d2209dae61db3e02b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_DATA={0x320, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "a625fb4e8ecc0271c07d0516a6aed34c8bd579919b3b4317fe7d7a1adb520a5f04e84d4b5727708efc3c924aabb1a640db963fbaa84c0470735bba9819dffe241ef230fcf12f393eaf116540e89a033f0056d3c0fc9b060262dc92f50fb7e481611ce81b9b54962cbade938aac21a76c46d8982c7b0817b406"}, @NFTA_DATA_VALUE={0x299, 0x1, "940233577eb2d4c863e08474f16f81411cee0f799a8ac3f553438a0fadd8851867293f0be6b584a182ce6f79450daf8ffb047a2b37e1ea571f0a82be05355e6ecd13a8c3af3b9b415b3f6ce95791485b0cce32740e99f47863cac05933fdbf25a4ad706e5b515ef08a9e353b78853d04e9484839171e90ccd525d2668dfa20020a72a1a7813d495ec7787a717e1472774d35ee7d2dfa401e4d23f9aa4ecd90f410d4b19dc0ff4754a55bc660692724631af29f316c3a14a3b05b77d1654449dced2127c77034a6865e2378987263525bb70c15b6ae786059fc976a111d5766466c2dabb800c46ce9c7d11d6d30369f5dbe4cd326ba91d4e4bac94c4957329a746d95afdc242186bcfff5f917afe9341d19943e5d71a80b680b4a2abae68b4d82d6170d2a623d30ee20c11308cdf076eb4a101d2b9e764cf1f6c212333ac2f3bd484bb0cc87b1b877cc71ff9097d000ac8f381578e5c27568112e692f4cf51ede5c37735e3b2a5072152bccd0f70c8aa74a6c19ee91642c440e3e7f602ebfd2944cd9460ad7e7b5e6d52778bf0d3b7c917f0fcc57606d771db2940730cda0f36159c5e1a4a366863cfd4b941f29f3b93de6203eee8ab8716f031bffb6b19dc34d55ed23ccb968c1bc676bb41a5577b66f0aff3ff11ed631e9bc7ef62dc3ed097757069ae2b81f38de5f123d18e569e23cbffdc9e7fb18c3ea63e1ac6f778f3b88aa09a4fa96498d11760475fdf0980e30b4273efce19594e277980fd816d307274e16866e97b0581ccd4b32c4be268ca4569713a930659f0d8115d0caec4e5193d366ab72c1ca312b85806f33daa708cc5675c7b9e43cb8c2e0c9740a75a42b95aec290942bba8bd84995a25b9fce363acd6bb00ee9fe20a3b69f3b79a97d24f2d08a7800a31506ae137db7c46ede4fce99c7047eeb"}]}]}]}]}], {0x14}}, 0x1ec4}}, 0x0) 05:39:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 05:39:05 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2812, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:39:05 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0x3bb) 05:39:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs, 0xffffffffffffff3f) 05:39:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf00000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) 05:39:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010003b0e0006dfbf00000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2c0012000800010073697400200002000800081f3300000014000200c6"], 0x54}}, 0x0) [ 309.759038][ T28] audit: type=1804 audit(1602394745.684:196): pid=19797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/285/bus" dev="sda1" ino=15956 res=1 errno=0 05:39:05 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x68db0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8100, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:39:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, {{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x2, 0x0) [ 309.848357][ T28] audit: type=1804 audit(1602394745.774:197): pid=19804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/288/bus" dev="sda1" ino=15766 res=1 errno=0 05:39:05 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x88aa1, 0x0) 05:39:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 05:39:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:39:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x98, 0x98, 0x0, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@loopback, @multicast2, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wlan1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'erspan0\x00', 'wlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x150, 0x190, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, 'I,'}}, @common=@unspec=@conntrack1={{0xb8, 'conntrack\x00'}, {{@ipv4=@dev, [], @ipv4=@remote, [], @ipv4=@remote, [], @ipv4=@loopback}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'macvlan1\x00', 'team_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 05:39:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000e640)={&(0x7f000000c200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000e600)={&(0x7f000000c240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_POSITION={0xc}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x12c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x50, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc}]}, @NFT_MSG_DELSETELEM={0x1cbc, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1ca8, 0x3, 0x0, 0x1, [{0x4c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "7dc0ddf527b283af4cc2eb48ed15c02ab701ea8e52dd9ae5572c3880eef31c606f072a5eb92608b7f93a5866f4e006b02f4ae6afd539ad263104b960a295a55722c4d37c9e6a81573530552969d1a65caae8284a6d975bcc2a07dab765f1e2211c06b028195de19400435acf99f792e560ff019b47739f16c28213f893c022ecdf8e782ba4c492da01cf5ff87b9f8e4f195ebb4965412e861cade4ee4b"}, @NFTA_DATA_VALUE={0x4d, 0x1, "37ddbf47446ba71875dfc23e52966053c5d92d4d92a03b4af170655fab0a1e38a7525bda0db684e6afd4033a0358fe3d377c304aa9c56b2368416ce64e3d1417a9549a7a22e03e849d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x91, 0x1, "9f897c9c2153d70f15391f96eff630926c98f7d85ae2cc8a32d34b1da76848239e501c141fb4aaf75aa2be9145b54819b3419d1b6c649690cad810148a5feec40d36f382a2da8f1a4b1b03578cd0d30dd988ead8bbeece78c16a754cfb5a98126ce9a9c9e16baddf7bc8e1e0b2c75f462172b5b06ce5656be49ab63265560100465b65ec11a185531e58cb49ce"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x248, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "936eca1e11672d6f4d109cc58dea44757b15a1464bba1eefaa19fd8439663d913016766876cdec0a2a189adcc9e70d0a05ffa231e526efa07b5301daf06854b1169998b1bb5f6b55267108b63273b24a730801de613e1b8f29368a0b4609389e9c0c53224fdb7d8abb3b9b644ad21c33692b91d4704280d0b6cdceca50197718c12399b2a2daa67d20555c4fcd7934db8706894918d00bc966068380db1b0b2d54"}, @NFTA_DATA_VALUE={0x99, 0x1, "3aa492c1e7361eb6a396ecb288b0e51e23bea0af007a24d9969f5da2af2746ab2cd8cd982aec59304adf3f2b695728af4b588a11aa114ec8309d55528df8a04a16666d612796e03c22a861ef580cb2fe0138c01e6def1608c0e5dfc3ea0fc27d85a1be13ab09e0a1ee027c6669d1b1644c0c57e1313503ba543d54f4ddac0ee3c8d8668f2474b12f02957622729505945d85f2a892"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "f28280e7efcf7614a9c1ec2b9770f84f5ad0a452f84f5c1933fce3a07bc67775b5cd1a9f80e1a34db044e0d504ffaeabd3f3a72df5c41a8fe5f0ec65b947490984591b720d84a631b0f3a17af735c2587ad7229d69cd7b032409c415c6906425e096c4438f4990e36013b5a64b4625e3c3da896e556240ff693fc1f73bd04d31b21e89355d9ef5bf6c964d199485856c9c3389080cd505082b14396bc4717094eaa25205be735d0c2fb11ca0c67d97e1827d0e4d01f991051d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0xb0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x118, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "007968798e0e55aefab1d532f7cd380a1211b3e90f554cd12b10031c1614c9e61a93c9610c72257da2d9189f6c0eaf941586cf9fc5bb12c53800110898b1c17203d6e5343b786f2f96fde618b5c3bd09048411f7b2831ca79a4529f7fbdbbceacb90ec5438ae3e22b82507a04e0598d9603722f3fb"}, @NFTA_DATA_VALUE={0x95, 0x1, "661f7464103da42541cef567000d43f3b283bf5f0176ab54f9ed18c3fb6e3c8b6475bce60587f4ed22a7220b6300818bcf7d27b9af19963bb0b9f1f49c1bfa08e099bfa591b8e95a3d024ea8267201495358f3b3f98ad0e9bbe51caf72b70b81428191693859caeae32304faa6478e838f8fe44244e6f9da0605ceaed4389e90a11e4f90d19574e4ce4cd339f5c25a858f"}]}]}, {0x4}, {0x16a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x30c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "eaf47f5b7f56548190f468ab6668be49fbc8f71502de85f93ee681f485b545d5d242aad00c5205383be8649128d67f511558f16c38472f8e2a0fcc623f039dd2a8b6dd9e98d9d36ca341064283c03be1a81e27a24f1bf6619113604db68dac7d1d596a59e30cfa0fc9712cdd05184e0af357f3e4717401fc65ad8e5386a3fce47bc114fd1c068481171cac1b1c141c0d9451565f4cf6aaed18ecc4ea456a53558c9ede3e95"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "48b221cb17e9da20482d961e7bf755896d716d71f063d0d9e4753bf2c8b586962015e39696d2e519dc7946d61e57ba11bd74cfdd86017d512306c44ce9c7d1a83a5f2b0531072a9a089db4b2272de7da1ed87607e812154cb957a982cc90802559b2ba922554b3f7b8"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "e318c463a3185ef497a4df56b58f94a5a6ca8f1ccfc59c3d9e838e70edd7e50e13676af7ce1781aa92"}, @NFTA_DATA_VALUE={0x61, 0x1, "9b75c01baf78cebab972874d8837bbdc6c12349e670a3a100d8cd068bb5cc0441d6d58c2f221b62c4b09b57fe9193e215bb3705693bf698e0560dad04a7565f00cf13f52fb7462f1c8f146b8526ad9dde7593173d092e80df9997558de"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_DATA={0x11f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "6916f22acbb982d5b6159fc1e581effb5eec068ccb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "a9d7dfe650346e7517a5090c12cb8c7e0027c361d4eeb335d6ca63261f4d94aa136b383d7f9cd562608ae2c5f90a991c9e6c14288218b92fb63d322c74a7c42c0b57cf2347c7d9073e92e52339e187d2e299d82a716516f870e082b17d020c0118db1dbeb11766d8b5cecbbc50c8f469c77bad1cbcc22c71e5f9d3b4cfa7f1dfbf0842cf03c49444dd16b7c05044d7739d16a6103c"}, @NFTA_DATA_VALUE={0x1001, 0x1, "9e7a7a3c176fbc6297d022acd16089a5dc83bb19a946ed410ac0139a941dbe5abd9505b30b8c76b539f49a954fc5981641223b100bde0898cfb9298ed5df5e6781189980e65b36e40d47b4392af047a678709bcaf62bee26a18d23eb78b10e702fc75a278dcfa2b0b00fe712965700f13cf82a736e5af6c0a7b7f96fcda11dd61136acd32932b24ef148ae0d8cabddb2753b6b07ec549637c8bea4f6871cf3af3779f0c3ca283db3bdcceee1ba104d09888540df6e2feb8fb687c9888a2cd92fafb251342041bdcacaf92b79cc5e7bf84bc410f9cb1e39459e867e26995b2fd12c68547a9c93aa9471805fda8b657d9db20a8437868465d2d2ecd28931827c9946303e1cbd82b17e10080ab85f0edd740be6685346740b3223b2809b7a8b19fb2d2a0cf3d585b20076a8271ed5a42a4b2b265161734fa9e40dfce6bc4b7b10a1cbc10c544f2c3abb08254ce8f864e4bf4252630fe5d76728246042299b1cb838ec30c205a4d4134757155db5d386aaa7e588a5b2eb880afe834d9fcb12b5f7eaca44aeb67fd9b16b80eddab7021e395b4f49ef71eb9248a579bc0231e342c17d735bbd5b024a409cc39320726e6179d4ef818d798f5c81918913ee7604254bc8e1d8edd688450fd1dfebf63f9f3036e6427b3fcf3447051f9eb9ad605096c2a2189859ba0d365676c53b5be187233ef5ca3701701908a8d3178a398f91c898a9125aceb142de54891a9ac5d9c8c3679fd227b710ff565bdbf0761e03293f908ef20df26a6c2192c9e33a1859504957d64cf51e75ba5132cfbd39d59904cf78de1ad31830217c9279e7d1902a996133d1f20f9880f266d24af8a903af33e4498339bd8e7a7fa139fff8460c138924c195bca84a6b4b91151d086bb0f1d392e1673dea3bb03e623d43f31de3ee90abcb380d0654b99488718124a97cb0976185bb74e9c9d5cc217756ec2ef62d212ae839ed0f25b386f071e229e67f99237cd1a99b4aa91b48310c32a1702584ce051788c10c4c5b317e06b689d95ac4e1bc07471dee4f6802e796f6684cc7390c2e4838de839f450fa46e1e346931e3fd7ad2756ebbfacc9856bc66a0056bf3a0dfd1202e533a3de02d6d0a11e4225006a2f31652245bd752bc2026d41cf0eb62a438dc530207be88a566304f6260b2b47f1a833fa070ba0965e6a44f1d1460ff816d2be89e0a9fb4874f6465ba5bc1ad15fb7902302c5602a3e5e353036262be11585569a210d4ee8ad45cb279e2879fa220efc0c89c20f1fe928cc5308a8596fddd0c8e8e4caf00e8464b40d9da2e6aa14d96f9195aa4e5ce447aa7719274147c20c80ed7f9afad34499bb62f579149da63d56ab014ca879938c9f8879c531fcd24b63141fc94a45230907f403b383ac5efe2cc70c2cc35e3ea86a463915de21b1757910d603afb4b8c0fb36a7eaa7ccdabbc939bdea2904f4131b254db9f44774fc2f7fc3489281ae845798e7c7018eca7b3f91b29c282f0ff4df50823c1803c88359191f48f1f57dcbfdf827d408124475074acbd15f5de1b2c6cab43e8d6f374e5bb411189c3b239fd2e89aca528972b7f86b7504c7d081169fe2a94248514b4cea1b9412bac5d7ed65972068ba24e9f4a635c0c7cf58154b797cbd232d1f7786de4de3e577123ce4fc59bca8e540fdcf8dfa6be6e2b92622d1cd00473909d733fa692994d0ab8193c23aa20c6595eff5a859d517851e73442e2c343e0b60a70207eb51c605b9db74034a8796fe6003462a16df23bf6e19623ad622fcce406fefde8212a5754a7640e30211428be68d78c405ae32c5c73a1793da9979fd5640799cbb94e659202326a1831eeff1c1521ea0ca0177dbb344c89b59f134a752f7469bf46775a4189a7882650cc057e8784a624e0f9f676b64e440ba6bc8a6eca5d25d414f2ccb963fd4f959d8e4162a968e3a0b50da9df7f18d9029a7c4d84fab759d2c0f4317aea13234e207b9ac6792a06f3fc9193e8cd8453f24a5d6930da2bf34d6b1b95225cb1a419f87d87b2eb7ab80d549947bc57c81e6cd9fcc910c23ac597ea4573f67af6c7e87892b1898c167570d2e89cf0f09c6d40860dded7b1b369fc957240022544e6bcc44be382d7f930e91ad50d5fed2a7d71bf2d106dc30dc3f0ed1cf3233d2cd6fd8791996e319df81643c5102698210b7fc29528a5de30e563390a9061a60e57a9953be079383a724ae083d6ffcacb2af2b4850ecc41cc532c0935bbd0ecc4cbc9f0d84e10651140d98212ad3d2b0f4becb7adaf2096de15b3851bf54103c602af895138581a87f1c0b2b6821cfa95afa4713dd2b8b16b5fdfd53f35c3c8c492687f0a95392caeb075fc8377217937092b71e2fbd64fafbc98e78cb1eac48c63d6708adf8e782b9f9f0b8010743d881e4f5de0537a27d036f91ede5df9f655f6a7197e25603c41c17ce736c27b07e4f5f27c9c18c53d5bb72fb1fe95fa6fc6f6df4611af2d77fc17c6091267c157dcdbb18ef71cdafb44de0e277147312d3cef183b4d821f49bced69af5c4885866b49a701fb2236e170448bb090d0c840d544b5a089ef87a438b583b4b25b7795e9f11bed75f2ebe959b8276740df74b60b00d26c236b0e01a36dc01f442c9d6710722ef8bdbd550e62fa6103da6754a23a3f6c00e06c18f7221f7096b27868e37c04ab4629269d5fb453aa0f1849844f65ade1937059e8da9c78fff652fb6a0f517a327cc980c5ad956ef6ed56c400c8025e59f77760825bf5d39d91de03673909980a92faf9aaeb9dffb491d83973718d1ebbde9e43fce20a71eb06c8bedc12cf58912466031f179614817018b1ac8f2a32156e176291f0444eb4c144e6637ec3b9403db0428a586a4a82e19e34c473fbf6d32e16aa0755b35233a86e2e9ffa4ba9c914045e445a0e53d7ae2252c37c4e53c13ab384ae4d56e116744d80c065ad15cac37f60a13b0e354bf5f5b580bb7ba5b666d0f8cae51a42d2fd75a0cc9e337cbf007c912e1cc4945bdd126869ca3e0dfabf922beef207793d2713010075adba020229854a48dd85597a26131e773b2699e727a35fd7d2fe342ee617135079576166a13c9ab42dc98135b223e72fdb1a6a0bcbd9e6d7ee6ff0099a94f01014ee1507a797f66170a859b98720062d3bb8225bcb521331dc5db26a14f43408213190f8b057f46842ea472b3c8b86a1a538d79bba9f2fcdc80b1004e7392ae49855a4f869eeb240addc3540722faaefe29929ca1c3ebab5f80a5503f113724d914b53b48291d2d88bad7111056824f4f1f3c24839649a861b8a3a0e719e5aa77141d05e5279c209058692140947f0865b8d5cdc72add89e52d53e5d5db70c5d962d34ae82aaf40ec428694345a6cd098e4cb80d829cdaea092d43b72598eed513e50ff6e1c90c5f369229cdf7dc41d6ba635b8bf1b02a83fe603a0bd59da9086856130eda138db88ffa65740d5acd1e504cc385d1af3e3e22eee9c5624f8af7a2091328c820e849d14f72cb70ef362a4f80eff673bf8f1980e13e0b31ef038331e7ff4c8168b2c785876dcab4994399b602c40052983191e041e09927a69bd71bd7b5a01c7f4dc53cbff967c9e8012c42f24d1b58ec49a7144b6e1443da68b488ed2c24c3c72958b5ad9b2d3d6584ff6c4d29f2f77f74dd4a77b339d0e27bf44c8218284b597c309a9dfb52bf1e2d85da87afe7c1e36a0757b947d7fb6cc6b33f9bca0c1ffd0642e8d5b6dd92222a08536a5b4b598a00a861f7d1d871e4a119b35761bc6bc7f6e93ee0dc650ae8143c28d520c27b901663404d06774eb841efeb8526daec93eb38b849562fc0565925ad1ebce307a4f8a7fa62f8da14daf9019b0f4c401600cc02d27dcbfb2dcb19c8059dc9a653b712efc20f7785cc7164e4e55283197bbd076d9ed95b651f50663ea9cacf26efe14085c6b9b553e1c7e9bdf11769653ded4d5f5b627792bd0ed677f285e3807a02573b342cc994fcb9f8151b58f9f4b34f4db9506d04f5344a08a46dab48f876d7f906b56818b022716ea531fc46d949ece7b6c791a3efc55683202d231dd2c87b27453caba2e38bea02c6db7e7f18d5732317e48dfaba06a65ca84d6966e74bdab3ff4c3ed8a8f0046fbc53a71ededc2b638c55d209d74196d9920d759f9a21064e127478ef4e046490857df933723c3d991bead36210be3f3f9c7c48629988c4313e0df6a7b3e7ccb3f052e2cd3f8efbb3bdd064a53d81e2e4874d541ccfdcf1ebd5301535f1931ba02dae1493aa6f60164982ecdd6e620d471f4740de75caa54106ced9e43103c859cf95bcd9a9397c99cf7f2c2ec3aeafe63a09b59d3a157c2b6f4d4427d9e24706788106aeaba0624b298ba7f83a8332e447960a4e6cb44368ce9b8e7836e538cd398b6cf7ca60299f7e8e2332cc4a660a24a8f6fd99727b7dc8f8a82bca96612e9ef8e2c43a521541630535136bcb8d1645b8289ad8051e1a376352a13e946f5ae5957a8d29ae753269ace86c150e7503db097c99165d5008ad03080bd9b9bc8a2514259eebf49e36e9af6fcaae6c32ea6a0d2ce0f456a645f1d531aa5d7d84f37e37475581978f071914c4d43ad511d5065aae2d26c98fa314b4a13d172123fc97deaf108897d2db29b60d7b3fd9a858c902cfd70e3a86c4579688632c27a3fd33a46e1bca08b6def9502409a5885cee07ee529fe04e322394327707439ea7b1824955f5b43ae27efeec194055a5fb100b154aac0162b3520e38022cc4abe817c99a1a24ca2abcb007a7f7f497874b7776045a92e6aba0af6638447614933423fb3c115c3b86bfdad82b6f3ae8d86cd82024db623e3da9507590ceca0f25c3a3329eb11d4e2853d86aa46848d6889c14c790de720401a87be8d1c4998e877c1b34d85056e2024506d03fa6f8d1303cdcb74932f766661be47394515256986ff8c5e98c45b66879be297fcfebb103da2d41e79d2fa05c4a8e5457ed6cc43e45ce28ad798c09512d1bf8e7be797eadfab5090d7e49328ee5e54fa1a55b7fa46a2ed6c23641134cd4a1ae2af899216b663f7a7b0708a48f39f4ecf0f8d7f0723b4c40e9bb912edb01eff4f9d8b58926822fffd66625d1a526b8af14220ad4714629bf20a9f51c6179fcd4fa16718fd2f2075e0a788fee6f6cc27ee08c28f760e01a0c33de04cc6345702f92660725c47a6e2cb0d94c72b7b22e281d53491d30dfe55927d28703a188d3dc1c88084d420a0b3a3dec1ed191912274f91d9f2d0e56d69f3388a9d32ea026090b0390e4f491a1c32bd5e9c95d7f0efe786a708e325edbd4990d6c497ca77fe9a9a8bd1ee4afb5b0ee84654bd582b1217c210e80215ebfc3bb75c7de158eb33b3dc4037a3a4221d7a5478fea5a5ada1e01f398323b3820c92eac693ed1c5ce94bf6c54c8b18fd53b03a32b97ba91c677dfd55616a65fe477c1d0899f33975308b0c432ad014742a7ef17e15bbd7f16a49536f0d6ac221a0eaee7eebca4804f6ebc8f62e47cc9102b8ef8b830a226d0925d5d429832cf25accc254298a44e6512a3e931b0534fe8085ed3be52ff87daa3a699aaa5cd75fcb882a68d865436b11b425da8ee1940ebfba3d4d3eab6f3970cde494cb43659d4a55461b7498d4198c96bedb5267985cddbfac66e5474dd075f4e82182418188cded5871070883858396eb35349fb0a7fffb0fc4ca9f3cd1d0fb873b7e3e188e153620cd28d9eaeed558ac4f7971d352550a12e79c986907684ffd7528af75577f928fc299130602a19c5f9c4c86f17f06afb2513d059b538"}, @NFTA_DATA_VALUE={0xc1, 0x1, "c74859931178bb4547cb865af0d4a0cc14f170e5e9c2ebabf51d8970f2cf6ff0207b203388d878fd630eb59ed1612b288cf8197ca189d0f114180f074faaa0d261cf0c040444d4fb8bf67faefe7149a1b4d4c9d2d2983b550a7ad9a4eca08fd1c4f0019a54ef7bd37b5b23d028fc74d21ea77833ad0ce5c53d4c31193442ff0ca598f03563b2c791224fd81ea73eb7de1ee44f27b550c0795693e41507949200b9ff93d29ae50c99c655a7dc9e87453db821f9c822b761758cb7d08329"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "ec8a77686f8f78d89fe20ba330a79ced5a42432d942f16c29a3766554ca7b8b0975c42dccf85749dfd286ff898c3b213a71537b0667b8d63f779f0fb41f0d6f22b59d4f636eb42701e"}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "768d67c696cabbb4d0e20c260de3e90b713d74fd6925a1ec1a3c28dbeb2e477fe8a54bbf1a6a94110a6b32cff2430a22b90c631cb4fd7ba2549f31ade3446d8d045dc8925c344524ef64e70bedcdeb8404607df3751b63636288443865ef9cf0d3785193597488b33370fb75519a3fc7e345a84dfed3d2a3d335a5e9c414dd077ba621b5e0c9d28784e476f753c192177ff7ca6ba5b78b8dd428506b8cbbcfcf20"}, @NFTA_DATA_VALUE={0x5, 0x1, "a0"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "dcde00398abba55616ea22fd00c28290182a0ccf11604297dcb87dbc73b5c4b008c65c267fe7c68fa17bd304a121551a6beae3adebd020793f"}]}]}]}]}], {0x14}}, 0x1ec4}}, 0x0) 05:39:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, {{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x2, 0x0) 05:39:06 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000010000000100000007"], 0x18}, 0x0) 05:39:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) [ 310.721354][T19833] x_tables: duplicate underflow at hook 1 05:39:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 05:39:06 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) 05:39:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x1) 05:39:06 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000180), 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 05:39:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:39:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:07 executing program 2: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:39:07 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:39:07 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000180), 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 05:39:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:39:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:07 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x6200, 0x0) 05:39:07 executing program 3: io_setup(0x4126, &(0x7f0000000040)=0x0) io_destroy(r0) 05:39:07 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) read$char_usb(r0, 0x0, 0x0) 05:39:07 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x4080, 0x0) 05:39:07 executing program 5: [ 311.778983][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 311.778995][ T28] audit: type=1804 audit(1602394747.704:200): pid=19882 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/287/bus" dev="sda1" ino=16382 res=1 errno=0 05:39:07 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x4}, 0x0, 0x0, 0x0, 0x0) [ 311.879572][ T28] audit: type=1804 audit(1602394747.704:201): pid=19880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/290/bus" dev="sda1" ino=16380 res=1 errno=0 05:39:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/47, 0x2f}], 0x1}}], 0x1, 0x0, &(0x7f0000003b00)) 05:39:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 05:39:08 executing program 3: io_setup(0x4126, &(0x7f0000000040)=0x0) io_destroy(r0) 05:39:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:08 executing program 2: io_setup(0x4126, &(0x7f0000000040)=0x0) io_destroy(r0) 05:39:08 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/mnt\x00') [ 312.724084][ T28] audit: type=1804 audit(1602394748.654:202): pid=19912 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/291/bus" dev="sda1" ino=16375 res=1 errno=0 05:39:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000540)='./file0\x00', 0x40, 0x0) sendmmsg$unix(r0, &(0x7f0000007200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18}], 0x1, 0x0) [ 312.771089][ T28] audit: type=1804 audit(1602394748.684:203): pid=19914 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/288/bus" dev="sda1" ino=16371 res=1 errno=0 05:39:08 executing program 3: ioprio_set$uid(0x0, 0xffffffffffffffff, 0x2004) 05:39:08 executing program 2: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1a000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:39:08 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x8000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 05:39:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000007200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1400000000000000010000000100000091"], 0x30}], 0x1, 0x0) 05:39:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000540)='./file0\x00', 0x40, 0x0) sendmmsg$unix(r0, &(0x7f0000007200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18}], 0x1, 0x0) 05:39:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000540)='./file0\x00', 0x40, 0x0) sendmmsg$unix(r0, &(0x7f0000007200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18}], 0x1, 0x0) 05:39:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffe51}}, 0x0) 05:39:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x680, 0x3a0, 0x238, 0xffffffff, 0x0, 0x0, 0x5b0, 0x5b0, 0xffffffff, 0x5b0, 0x5b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "e94f"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @gre_key, @icmp_id}}}, {{@ipv6={@private2, @ipv4={[], [], @local}, [], [], 'veth1\x00', 'veth1_to_batadv\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@dst={{0x48, 'dst\x00'}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@ipv6={@mcast1, @private1, [], [], 'batadv_slave_0\x00', 'veth0\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@unspec=@comment={{0x120, 'comment\x00'}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv4=@local, @port, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) 05:39:09 executing program 2: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:39:09 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101001, 0x0) 05:39:09 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x8000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 05:39:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:09 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) 05:39:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @sco={0x1f, @none}, @tipc, @isdn, 0x6}) [ 313.671458][T19954] x_tables: duplicate underflow at hook 1 [ 313.686248][ T28] audit: type=1804 audit(1602394749.614:204): pid=19960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/292/bus" dev="sda1" ino=16382 res=1 errno=0 05:39:09 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000002fc0)=@abs, 0x6e) 05:39:09 executing program 5: clone(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0xcda) [ 313.797235][ T28] audit: type=1804 audit(1602394749.654:205): pid=19961 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/289/bus" dev="sda1" ino=16373 res=1 errno=0 05:39:09 executing program 3: socket(0x10, 0x2, 0x7) 05:39:09 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x88aa1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 05:39:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x9c, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x13c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_USERDATA={0xdd, 0xd, 0x1, 0x0, "bcea50dbaad14d33f8669544d127bf5d0e42c9fbbbdf5843faf60fa3dac85edaac84a45e7b161aa09791c034f4fe9a75842218ce14191679ce8d8a7cb1f5bae00e579be272cfe394f630a537fabd78e57cc23b5684c829671f1f562ac069da42a98f7f9004cb34c7e0a60d216e4dfb3fe5b03c23807cdc054fddb6ad31cd614d3ef21e5eca31474cf01a785a309c46b1b1106afc2d7cb69654d259c450929ce4d241f09f7449e1526c4407a35895712db774f60522bd1c85813c6809232adc2b5f15d5a7243269ebc263f718511777bab5b5a2be5d5b4726dc"}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xc3c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc14, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ffebd52b50a1756036beda59681f17446133aebd7adc28868f72e271022b5a332672a22bade254b8da744eb2724cf1194700dfb1ebd1cb8fce3d8c5b6d0771f36f39700e5677c6d3c1d5b7ef36"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "47033e4a8bd3b478c7c6a5b5dd36bd2a92823d653f098d03ac65b8a00e4c83fcb76c576f1a91008ea9"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x35, 0x1, "721749ae1978f1f1de05b8ae02321b8ad2a56264af4ff4006917d93889b98a14be0a6a394062a6d072b80b037c5a7ef8ad"}, @NFTA_DATA_VALUE={0xf9, 0x1, "562ccdd5750c66fe8bd10bd9a8594c00d4f196dd3c31313fcd495137818b3f0c632396272c4ac92ea610de991eb06eb931894c7f8f91d4b4d1249f91d5cf610a5bd2ed26b94c29ad12be5c833b490dca466506def8b7d9a39e957dbc5b0e16b207386ba2ad2d671d67004bcbe6e22bbb39e4a30101f163ef93367e67cc9ac1cfcff29512fa2f17556e927dee1aa57404d469804b422b0779ab7dfdff0249ee61eed3db5b30e3fef5bedfe6bf4dcf5410313d6f08dba03ef912eb1ca230b472d230509bad2ad8444f44e36cccd3700d8b6cfe10e22482548df014aa459633cf1ca6526909f572e3b267c274642cf6bf3c9dea3b7b8c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x29, 0x1, "13476be15add0e28c6eb739b0f7c601b9b309b760b5215792d7dc539d3088ff56fd3731afe"}, @NFTA_DATA_VALUE={0xad, 0x1, "fbb2acd13224e593a592cc2902beb6ea0787a76fec9551db29dbcff8c9a42efd3ac3945bf04616fcdfd969581992ccc593178d0473713e8e4dd1f6052aeda03da8174695c557e7b11f4ed11459ecabc68c7433f2e65d6cc00917d31784238257d3c6cd861b56d1940d46f9fd2a729302481bd7d6f24d3f98cbd17c4f515bacbeb81e38e8f1a9f9add5fbbb9c52865dd3feb718e89d08ac92f5c3cb02063b824ae86abe541adea03f37"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x174, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "0eb62ccec13525be3e134da888d93379753572fd777213483e1bdd8f0bb110cea7766234c876ab284662f6b4003f72d715df7405275599a455bbb03416bc4fb9902396ab8c149271ca516bc82910a1ab010772a251de79a6a8314b923163d803aa1703ebdc793d4c28c6821af62420304a2f6d099ee72b831c90e02a85e948f138433a7fc5a0d983030213421ff69596ffbc024804ea34bb7ea4115f310c2e979536b891d3d93ad1de154564a7ad50d4df329909daff3828c98439b1754644c81054bebd81ff7ad8f43ea3885e07fab61ef56d8d8711cdfaec"}, @NFTA_DATA_VALUE={0x8d, 0x1, "6d2bd2d8d3219834df33b40ca140c802088570abd73e9ab04bc19f34f652ea224d750fe58e30c31d44ce7d18b3e4da4b0bc329fffe12d1d2e817589dec6b45ff4ce543fd6a7582f56dc1706b7f1f5b5664da457eda1ae0b51eb945a81bc3b4d6030c9eb0a31291153180970084192540df72b11c57d561ffc40b97663653f17e642e107502019bde50"}]}]}, {0x6bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x655, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14}}, 0xec4}}, 0x0) 05:39:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 05:39:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005940)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}], 0x1, 0x4850) 05:39:10 executing program 5: clone(0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0xcda) 05:39:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f0000001b80)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x9c, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x13c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_USERDATA={0xdd, 0xd, 0x1, 0x0, "bcea50dbaad14d33f8669544d127bf5d0e42c9fbbbdf5843faf60fa3dac85edaac84a45e7b161aa09791c034f4fe9a75842218ce14191679ce8d8a7cb1f5bae00e579be272cfe394f630a537fabd78e57cc23b5684c829671f1f562ac069da42a98f7f9004cb34c7e0a60d216e4dfb3fe5b03c23807cdc054fddb6ad31cd614d3ef21e5eca31474cf01a785a309c46b1b1106afc2d7cb69654d259c450929ce4d241f09f7449e1526c4407a35895712db774f60522bd1c85813c6809232adc2b5f15d5a7243269ebc263f718511777bab5b5a2be5d5b4726dc"}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xc3c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc14, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "ffebd52b50a1756036beda59681f17446133aebd7adc28868f72e271022b5a332672a22bade254b8da744eb2724cf1194700dfb1ebd1cb8fce3d8c5b6d0771f36f39700e5677c6d3c1d5b7ef36"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "47033e4a8bd3b478c7c6a5b5dd36bd2a92823d653f098d03ac65b8a00e4c83fcb76c576f1a91008ea9"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x35, 0x1, "721749ae1978f1f1de05b8ae02321b8ad2a56264af4ff4006917d93889b98a14be0a6a394062a6d072b80b037c5a7ef8ad"}, @NFTA_DATA_VALUE={0xf9, 0x1, "562ccdd5750c66fe8bd10bd9a8594c00d4f196dd3c31313fcd495137818b3f0c632396272c4ac92ea610de991eb06eb931894c7f8f91d4b4d1249f91d5cf610a5bd2ed26b94c29ad12be5c833b490dca466506def8b7d9a39e957dbc5b0e16b207386ba2ad2d671d67004bcbe6e22bbb39e4a30101f163ef93367e67cc9ac1cfcff29512fa2f17556e927dee1aa57404d469804b422b0779ab7dfdff0249ee61eed3db5b30e3fef5bedfe6bf4dcf5410313d6f08dba03ef912eb1ca230b472d230509bad2ad8444f44e36cccd3700d8b6cfe10e22482548df014aa459633cf1ca6526909f572e3b267c274642cf6bf3c9dea3b7b8c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x29, 0x1, "13476be15add0e28c6eb739b0f7c601b9b309b760b5215792d7dc539d3088ff56fd3731afe"}, @NFTA_DATA_VALUE={0xad, 0x1, "fbb2acd13224e593a592cc2902beb6ea0787a76fec9551db29dbcff8c9a42efd3ac3945bf04616fcdfd969581992ccc593178d0473713e8e4dd1f6052aeda03da8174695c557e7b11f4ed11459ecabc68c7433f2e65d6cc00917d31784238257d3c6cd861b56d1940d46f9fd2a729302481bd7d6f24d3f98cbd17c4f515bacbeb81e38e8f1a9f9add5fbbb9c52865dd3feb718e89d08ac92f5c3cb02063b824ae86abe541adea03f37"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x174, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "0eb62ccec13525be3e134da888d93379753572fd777213483e1bdd8f0bb110cea7766234c876ab284662f6b4003f72d715df7405275599a455bbb03416bc4fb9902396ab8c149271ca516bc82910a1ab010772a251de79a6a8314b923163d803aa1703ebdc793d4c28c6821af62420304a2f6d099ee72b831c90e02a85e948f138433a7fc5a0d983030213421ff69596ffbc024804ea34bb7ea4115f310c2e979536b891d3d93ad1de154564a7ad50d4df329909daff3828c98439b1754644c81054bebd81ff7ad8f43ea3885e07fab61ef56d8d8711cdfaec"}, @NFTA_DATA_VALUE={0x8d, 0x1, "6d2bd2d8d3219834df33b40ca140c802088570abd73e9ab04bc19f34f652ea224d750fe58e30c31d44ce7d18b3e4da4b0bc329fffe12d1d2e817589dec6b45ff4ce543fd6a7582f56dc1706b7f1f5b5664da457eda1ae0b51eb945a81bc3b4d6030c9eb0a31291153180970084192540df72b11c57d561ffc40b97663653f17e642e107502019bde50"}]}]}, {0x6bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x655, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14}}, 0xec4}}, 0x0) 05:39:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r0, &(0x7f0000007200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x10}}], 0x28}], 0x1, 0x0) 05:39:10 executing program 3: [ 314.714832][ T28] audit: type=1804 audit(1602394750.644:206): pid=20002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/290/bus" dev="sda1" ino=16372 res=1 errno=0 05:39:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 05:39:10 executing program 3: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 314.806565][ T28] audit: type=1804 audit(1602394750.654:207): pid=20001 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/293/bus" dev="sda1" ino=16371 res=1 errno=0 05:39:10 executing program 2: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1228, 0x1) r0 = open(&(0x7f0000001640)='./file0\x00', 0x141882, 0x0) write$binfmt_script(r0, &(0x7f00000036c0)=ANY=[], 0xfffffce4) 05:39:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:11 executing program 5: socketpair(0x11, 0x3, 0x9, 0x0) 05:39:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x201}, 0x14}}, 0x0) 05:39:11 executing program 3: r0 = open(&(0x7f0000000540)='./file0\x00', 0x40042, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = open(&(0x7f0000001640)='./file0\x00', 0x101082, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x65) read$FUSE(r0, 0x0, 0x0) 05:39:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000180), 0x4) 05:39:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @sco={0x1f, @fixed}, @sco}) 05:39:11 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x236103, 0x0) 05:39:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x1d8, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a666"}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, "172b"}}]}, @common=@unspec=@LED={0x0, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'ipvlan1\x00', 'netdevsim0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@hashlimit1={{0x0, 'hashlimit\x00'}, {'ipvlan1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x10f) 05:39:11 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) [ 315.745939][ T28] audit: type=1804 audit(1602394751.674:208): pid=20041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/294/bus" dev="sda1" ino=16375 res=1 errno=0 05:39:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x201}, 0x14}}, 0x0) 05:39:11 executing program 2: ustat(0x8, 0x0) [ 315.862598][ T28] audit: type=1804 audit(1602394751.704:209): pid=20045 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/291/bus" dev="sda1" ino=16365 res=1 errno=0 05:39:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x1}, 0x24}}, 0x0) 05:39:12 executing program 5: msgrcv(0x0, 0x0, 0x1a, 0x3, 0x0) 05:39:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @remote, 0x345}, 0x80, 0x0}}], 0x1, 0x0) 05:39:12 executing program 1: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180), 0xffffffffffffffa6) 05:39:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:12 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 05:39:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r0, &(0x7f0000000a00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 05:39:12 executing program 1: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1228, 0x1) r0 = open(&(0x7f0000001640)='./file0\x00', 0x141882, 0x0) write$binfmt_script(r0, &(0x7f00000036c0)=ANY=[], 0xfffffce4) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) 05:39:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000005240)={&(0x7f0000005180), 0xc, &(0x7f0000005200)={0x0}}, 0x0) 05:39:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000007200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 05:39:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) write$binfmt_elf64(r0, 0x0, 0x94b) [ 316.838604][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 316.838618][ T28] audit: type=1804 audit(1602394752.764:211): pid=20091 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/295/bus" dev="sda1" ino=16367 res=1 errno=0 05:39:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0xfffffd72}}, 0x0) 05:39:13 executing program 2: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1228, 0x1) r0 = open(&(0x7f0000001640)='./file0\x00', 0x101082, 0x0) r1 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "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"}, 0xfffffce4) 05:39:13 executing program 1: clone(0xc030d380, 0x0, 0x0, 0x0, 0x0) 05:39:13 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000005240)={&(0x7f0000005180), 0xc, &(0x7f0000005200)={0x0}}, 0x0) 05:39:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2000000, 0x4) 05:39:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x3, 0x1, 0x801, 0x0, 0x0, {0xbf99bebf43601cb8}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 05:39:13 executing program 5: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x8000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 05:39:13 executing program 3: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) [ 317.704138][ T28] audit: type=1804 audit(1602394753.634:212): pid=20115 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/293/bus" dev="sda1" ino=15767 res=1 errno=0 05:39:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="d800000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r6], 0xd8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 317.813929][ T28] audit: type=1804 audit(1602394753.744:213): pid=20129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/296/bus" dev="sda1" ino=16364 res=1 errno=0 05:39:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005940)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e21, @private}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) [ 317.946742][T20134] __nla_validate_parse: 3 callbacks suppressed [ 317.946750][T20134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.009618][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.059145][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.124798][T20134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.148157][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 05:39:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(0x0, 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:14 executing program 3: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:39:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2003, 0x0) 05:39:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="d800000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r6], 0xd8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:39:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="d800000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r6], 0xd8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:39:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="d800000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r6], 0xd8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 318.654488][T20169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.684802][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:39:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="d800000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r6], 0xd8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 318.714825][T20177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.734594][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.755788][ T28] audit: type=1804 audit(1602394754.684:214): pid=20194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/294/bus" dev="sda1" ino=16382 res=1 errno=0 [ 318.780014][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.837086][ T28] audit: type=1804 audit(1602394754.764:215): pid=20223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/297/bus" dev="sda1" ino=15776 res=1 errno=0 05:39:14 executing program 2: r0 = open(&(0x7f0000000540)='./file0\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = open(&(0x7f0000001640)='./file0\x00', 0x101082, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '#! '}, 0x8) 05:39:14 executing program 5: 05:39:15 executing program 2: r0 = open(&(0x7f0000000540)='./file0\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r1 = open(&(0x7f0000001640)='./file0\x00', 0x101082, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '#! '}, 0x8) 05:39:15 executing program 3: 05:39:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="d800000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r6], 0xd8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 05:39:15 executing program 3: 05:39:15 executing program 5: 05:39:15 executing program 2: 05:39:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:15 executing program 5: 05:39:15 executing program 3: 05:39:15 executing program 2: 05:39:15 executing program 5: [ 319.748815][ T28] audit: type=1804 audit(1602394755.674:216): pid=20273 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/295/bus" dev="sda1" ino=16370 res=1 errno=0 05:39:15 executing program 1: 05:39:15 executing program 3: [ 319.863150][ T28] audit: type=1804 audit(1602394755.744:217): pid=20279 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/298/bus" dev="sda1" ino=16366 res=1 errno=0 05:39:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:16 executing program 2: 05:39:16 executing program 5: 05:39:16 executing program 3: 05:39:16 executing program 1: 05:39:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:16 executing program 5: 05:39:16 executing program 1: 05:39:16 executing program 2: 05:39:16 executing program 3: [ 320.737623][ T28] audit: type=1804 audit(1602394756.664:218): pid=20302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/296/bus" dev="sda1" ino=16366 res=1 errno=0 05:39:16 executing program 5: [ 320.830210][ T28] audit: type=1804 audit(1602394756.754:219): pid=20307 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/299/bus" dev="sda1" ino=16365 res=1 errno=0 05:39:16 executing program 2: 05:39:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:17 executing program 1: 05:39:17 executing program 3: 05:39:17 executing program 2: 05:39:17 executing program 5: 05:39:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:17 executing program 3: 05:39:17 executing program 2: 05:39:17 executing program 5: 05:39:17 executing program 1: 05:39:17 executing program 3: [ 321.791937][ T28] audit: type=1804 audit(1602394757.724:220): pid=20327 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/297/bus" dev="sda1" ino=16365 res=1 errno=0 05:39:17 executing program 3: [ 321.945332][ T28] audit: type=1804 audit(1602394757.874:221): pid=20338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/300/bus" dev="sda1" ino=16376 res=1 errno=0 05:39:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(0x0, 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:18 executing program 2: 05:39:18 executing program 1: 05:39:18 executing program 5: 05:39:18 executing program 3: 05:39:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:18 executing program 2: 05:39:18 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080), 0x4) 05:39:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x5}, 0x14}}, 0x0) 05:39:18 executing program 3: 05:39:18 executing program 3: [ 322.883419][ T28] audit: type=1804 audit(1602394758.814:222): pid=20360 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/298/bus" dev="sda1" ino=16382 res=1 errno=0 05:39:18 executing program 5: [ 322.943385][ T28] audit: type=1804 audit(1602394758.844:223): pid=20363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/301/bus" dev="sda1" ino=16371 res=1 errno=0 05:39:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(0x0, 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:19 executing program 2: 05:39:19 executing program 1: 05:39:19 executing program 3: 05:39:19 executing program 5: 05:39:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:19 executing program 3: 05:39:19 executing program 2: 05:39:19 executing program 5: 05:39:19 executing program 3: 05:39:19 executing program 1: [ 323.843113][ T28] audit: type=1804 audit(1602394759.774:224): pid=20384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/302/bus" dev="sda1" ino=15767 res=1 errno=0 05:39:19 executing program 5: [ 323.903451][ T28] audit: type=1804 audit(1602394759.804:225): pid=20387 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/299/bus" dev="sda1" ino=16365 res=1 errno=0 05:39:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(0x0, 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:20 executing program 3: 05:39:20 executing program 1: 05:39:20 executing program 2: 05:39:20 executing program 5: 05:39:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:20 executing program 5: 05:39:20 executing program 3: 05:39:20 executing program 1: 05:39:20 executing program 2: 05:39:20 executing program 5: [ 324.802590][ T28] audit: type=1804 audit(1602394760.734:226): pid=20412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/303/bus" dev="sda1" ino=16369 res=1 errno=0 05:39:20 executing program 3: [ 324.922434][ T28] audit: type=1804 audit(1602394760.764:227): pid=20414 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/300/bus" dev="sda1" ino=16381 res=1 errno=0 05:39:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:21 executing program 1: 05:39:21 executing program 2: 05:39:21 executing program 5: 05:39:21 executing program 3: 05:39:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x80) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:21 executing program 3: 05:39:21 executing program 2: 05:39:21 executing program 1: 05:39:21 executing program 5: 05:39:21 executing program 2: 05:39:21 executing program 5: [ 325.792458][ T28] audit: type=1804 audit(1602394761.724:228): pid=20437 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/304/bus" dev="sda1" ino=16370 res=1 errno=0 [ 325.931537][ T28] audit: type=1804 audit(1602394761.754:229): pid=20440 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/301/bus" dev="sda1" ino=16374 res=1 errno=0 05:39:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:22 executing program 3: 05:39:22 executing program 1: 05:39:22 executing program 5: 05:39:22 executing program 2: 05:39:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:22 executing program 2: 05:39:22 executing program 1: 05:39:22 executing program 2: 05:39:22 executing program 3: 05:39:22 executing program 5: 05:39:22 executing program 1: [ 326.805423][ T28] audit: type=1804 audit(1602394762.734:230): pid=20465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/302/bus" dev="sda1" ino=16377 res=1 errno=0 05:39:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:23 executing program 1: 05:39:23 executing program 3: 05:39:23 executing program 2: 05:39:23 executing program 5: 05:39:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:23 executing program 3: 05:39:23 executing program 1: 05:39:23 executing program 5: 05:39:23 executing program 2: 05:39:23 executing program 1: 05:39:23 executing program 3: [ 327.776759][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 327.776772][ T28] audit: type=1804 audit(1602394763.704:232): pid=20486 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/303/bus" dev="sda1" ino=16365 res=1 errno=0 [ 328.059458][ T28] audit: type=1804 audit(1602394763.804:233): pid=20496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/306/bus" dev="sda1" ino=16381 res=1 errno=0 05:39:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:25 executing program 1: 05:39:25 executing program 3: 05:39:25 executing program 5: 05:39:25 executing program 2: [ 329.442466][ T28] audit: type=1804 audit(1602394765.364:234): pid=20512 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/307/bus" dev="sda1" ino=16372 res=1 errno=0 05:39:26 executing program 2: 05:39:26 executing program 3: 05:39:26 executing program 1: 05:39:26 executing program 5: 05:39:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:26 executing program 2: 05:39:26 executing program 5: 05:39:26 executing program 3: 05:39:26 executing program 1: 05:39:26 executing program 5: 05:39:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:26 executing program 2: 05:39:26 executing program 3: 05:39:26 executing program 1: 05:39:26 executing program 5: 05:39:26 executing program 5: [ 330.464866][ T28] audit: type=1804 audit(1602394766.394:235): pid=20536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/308/bus" dev="sda1" ino=16371 res=1 errno=0 [ 330.839241][ T28] audit: type=1804 audit(1602394766.764:236): pid=20547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/304/bus" dev="sda1" ino=16374 res=1 errno=0 05:39:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:28 executing program 2: 05:39:28 executing program 1: 05:39:28 executing program 5: 05:39:28 executing program 3: 05:39:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:28 executing program 1: 05:39:28 executing program 5: 05:39:28 executing program 1: 05:39:28 executing program 3: 05:39:28 executing program 2: 05:39:28 executing program 1: [ 332.230585][ T28] audit: type=1804 audit(1602394768.164:237): pid=20560 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/309/bus" dev="sda1" ino=15795 res=1 errno=0 [ 332.737928][ T28] audit: type=1804 audit(1602394768.664:238): pid=20576 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/305/bus" dev="sda1" ino=15778 res=1 errno=0 05:39:30 executing program 3: 05:39:30 executing program 2: 05:39:30 executing program 5: 05:39:30 executing program 1: 05:39:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:30 executing program 1: 05:39:30 executing program 5: 05:39:30 executing program 1: 05:39:30 executing program 2: 05:39:30 executing program 3: [ 334.992498][ T28] audit: type=1804 audit(1602394770.924:239): pid=20585 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/310/bus" dev="sda1" ino=16113 res=1 errno=0 05:39:31 executing program 2: 05:39:31 executing program 3: 05:39:31 executing program 5: 05:39:31 executing program 1: 05:39:31 executing program 2: [ 335.743347][ T28] audit: type=1804 audit(1602394771.674:240): pid=20608 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/306/bus" dev="sda1" ino=16129 res=1 errno=0 05:39:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:33 executing program 1: 05:39:33 executing program 3: 05:39:33 executing program 5: 05:39:33 executing program 2: 05:39:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:33 executing program 3: 05:39:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:33 executing program 2: clock_gettime(0x4, &(0x7f0000000940)) 05:39:33 executing program 1: syz_genetlink_get_family_id$devlink(0xffffffffffffffff) 05:39:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 338.015764][ T28] audit: type=1804 audit(1602394773.944:241): pid=20618 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/311/bus" dev="sda1" ino=16130 res=1 errno=0 05:39:34 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @rights={{0x10}}], 0x30}, 0x0) [ 338.609678][ T28] audit: type=1804 audit(1602394774.534:242): pid=20642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/307/bus" dev="sda1" ino=16129 res=1 errno=0 05:39:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x8f000000}]}}, &(0x7f0000000240)=""/144, 0x32, 0x90, 0x1}, 0x20) 05:39:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x5, 0xc0cc}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000240)=""/141, 0x36, 0x8d, 0x1}, 0x20) 05:39:36 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:36 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @rights={{0x10}}], 0x30}, 0x0) 05:39:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) 05:39:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000200000000000000be00000d"], &(0x7f0000000000)=""/147, 0x46, 0x93, 0x1}, 0x20) 05:39:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:36 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) 05:39:36 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 340.234024][ T28] audit: type=1804 audit(1602394776.164:243): pid=20658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/312/bus" dev="sda1" ino=16380 res=1 errno=0 05:39:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x8f00, 0x0, 0xc}]}}, &(0x7f0000000240)=""/144, 0x26, 0x90, 0x1}, 0x20) 05:39:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe}, {0x200000e}, {0x3, 0x3}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000240)=""/144, 0x40, 0x90, 0x1}, 0x20) 05:39:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x8f00, 0x0, 0xc}]}}, &(0x7f0000000240)=""/144, 0x26, 0x90, 0x1}, 0x20) 05:39:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x80}}]}}, &(0x7f0000000240)=""/144, 0x32, 0x90, 0x8}, 0x20) [ 340.565569][T20678] BPF:[1] ARRAY (anon) [ 340.576914][T20678] BPF:type_id=2 index_type_id=128 nr_elems=0 [ 340.594095][T20678] BPF: [ 340.613226][T20678] BPF:Invalid index [ 340.624501][T20678] BPF: [ 340.624501][T20678] [ 340.640729][T20678] BPF:[1] ARRAY (anon) [ 340.652779][T20678] BPF:type_id=2 index_type_id=128 nr_elems=0 [ 340.669678][T20678] BPF: [ 340.677596][T20678] BPF:Invalid index [ 340.689668][T20678] BPF: [ 340.689668][T20678] [ 340.898150][ T28] audit: type=1804 audit(1602394776.824:244): pid=20690 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/308/bus" dev="sda1" ino=16372 res=1 errno=0 05:39:38 executing program 1: unshare(0x40000) 05:39:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:39:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:38 executing program 1: bpf$MAP_CREATE(0x5, &(0x7f0000000080), 0x83) 05:39:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0xa7d, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x40) 05:39:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x61}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 342.256144][ T28] audit: type=1804 audit(1602394778.184:245): pid=20707 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/313/bus" dev="sda1" ino=16384 res=1 errno=0 05:39:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000240)=""/144, 0x26, 0x90, 0x1}, 0x20) 05:39:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x4, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x200000e}, {}]}]}}, &(0x7f0000000240)=""/144, 0x36, 0x90, 0x1}, 0x20) 05:39:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x44b}, 0x40) 05:39:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x4, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:38 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0}, 0x0) [ 342.902471][ T28] audit: type=1804 audit(1602394778.834:246): pid=20735 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/309/bus" dev="sda1" ino=16375 res=1 errno=0 05:39:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe}, {0x200000e}, {0x3}]}]}}, &(0x7f0000000240)=""/144, 0x3e, 0x90, 0x1}, 0x20) 05:39:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:39 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000000080), 0x40) 05:39:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xf}]}}, &(0x7f0000000240)=""/144, 0x26, 0x90, 0x1}, 0x20) 05:39:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x12, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1, &(0x7f0000000000)=@raw=[@generic={0x5}], &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x7}, 0x40) 05:39:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x400000, 0x8}, 0x40) [ 343.816679][ T28] audit: type=1804 audit(1602394779.744:247): pid=20756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/314/bus" dev="sda1" ino=16378 res=1 errno=0 05:39:39 executing program 2: 05:39:39 executing program 1: [ 343.946765][ T28] audit: type=1804 audit(1602394779.804:248): pid=20760 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/310/bus" dev="sda1" ino=16129 res=1 errno=0 05:39:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:40 executing program 2: 05:39:40 executing program 3: 05:39:40 executing program 5: 05:39:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000e00)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:39:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:40 executing program 5: 05:39:40 executing program 3: 05:39:40 executing program 2: 05:39:40 executing program 1: 05:39:40 executing program 3: [ 344.811530][ T28] audit: type=1804 audit(1602394780.744:249): pid=20789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/315/bus" dev="sda1" ino=16137 res=1 errno=0 05:39:40 executing program 2: [ 344.928723][ T28] audit: type=1804 audit(1602394780.774:250): pid=20792 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/311/bus" dev="sda1" ino=16138 res=1 errno=0 05:39:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:41 executing program 1: 05:39:41 executing program 5: 05:39:41 executing program 2: 05:39:41 executing program 3: 05:39:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:41 executing program 5: 05:39:41 executing program 2: 05:39:41 executing program 1: 05:39:41 executing program 3: 05:39:41 executing program 2: 05:39:41 executing program 5: [ 345.799558][ T28] audit: type=1804 audit(1602394781.724:251): pid=20817 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/312/bus" dev="sda1" ino=16376 res=1 errno=0 [ 345.923297][ T28] audit: type=1804 audit(1602394781.754:252): pid=20819 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/316/bus" dev="sda1" ino=16380 res=1 errno=0 05:39:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:42 executing program 1: 05:39:42 executing program 3: 05:39:42 executing program 2: 05:39:42 executing program 5: 05:39:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:42 executing program 5: 05:39:42 executing program 2: 05:39:42 executing program 1: 05:39:42 executing program 3: 05:39:42 executing program 1: 05:39:42 executing program 2: [ 346.806490][ T28] audit: type=1804 audit(1602394782.734:253): pid=20846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/313/bus" dev="sda1" ino=15735 res=1 errno=0 [ 346.873235][ T28] audit: type=1804 audit(1602394782.764:254): pid=20848 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/317/bus" dev="sda1" ino=15754 res=1 errno=0 05:39:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:43 executing program 5: 05:39:43 executing program 1: 05:39:43 executing program 3: 05:39:43 executing program 2: 05:39:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bd", 0x79}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x5, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 05:39:43 executing program 3: 05:39:43 executing program 2: 05:39:43 executing program 1: 05:39:43 executing program 5: 05:39:43 executing program 3: 05:39:43 executing program 1: [ 347.816903][ T28] audit: type=1804 audit(1602394783.744:255): pid=20873 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir924928044/syzkaller.G3ApjR/314/bus" dev="sda1" ino=16367 res=1 errno=0 [ 347.889239][ T28] audit: type=1804 audit(1602394783.774:256): pid=20874 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir825447888/syzkaller.Lve1v1/318/bus" dev="sda1" ino=16370 res=1 errno=0 [ 348.225714][ T3258] ================================================================== [ 348.233808][ T3258] BUG: KCSAN: data-race in __blk_mq_sched_dispatch_requests / __blk_mq_sched_dispatch_requests [ 348.244094][ T3258] [ 348.246400][ T3258] write to 0xffff888129759810 of 8 bytes by task 3259 on cpu 0: [ 348.254006][ T3258] __blk_mq_sched_dispatch_requests+0x16a/0x2a0 [ 348.260232][ T3258] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 348.266202][ T3258] __blk_mq_run_hw_queue+0xee/0x1c0 [ 348.271375][ T3258] __blk_mq_delay_run_hw_queue+0x199/0x340 [ 348.277162][ T3258] blk_mq_run_hw_queue+0x231/0x260 [ 348.282255][ T3258] blk_mq_requeue_work+0x423/0x490 [ 348.287338][ T3258] process_one_work+0x3e1/0x9a0 [ 348.292163][ T3258] worker_thread+0x665/0xbe0 [ 348.296729][ T3258] kthread+0x20d/0x230 [ 348.300789][ T3258] ret_from_fork+0x1f/0x30 [ 348.305281][ T3258] [ 348.307583][ T3258] read to 0xffff888129759810 of 8 bytes by task 3258 on cpu 1: [ 348.315096][ T3258] __blk_mq_sched_dispatch_requests+0xb1/0x2a0 [ 348.321232][ T3258] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 348.327193][ T3258] __blk_mq_run_hw_queue+0xee/0x1c0 [ 348.332377][ T3258] blk_mq_run_work_fn+0x3d/0x50 [ 348.337207][ T3258] process_one_work+0x3e1/0x9a0 [ 348.342037][ T3258] worker_thread+0x665/0xbe0 [ 348.346604][ T3258] kthread+0x20d/0x230 [ 348.350646][ T3258] ret_from_fork+0x1f/0x30 [ 348.355025][ T3258] [ 348.357321][ T3258] Reported by Kernel Concurrency Sanitizer on: [ 348.363447][ T3258] CPU: 1 PID: 3258 Comm: kworker/1:1H Not tainted 5.9.0-rc8-syzkaller #0 [ 348.371823][ T3258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.381856][ T3258] Workqueue: kblockd blk_mq_run_work_fn [ 348.387412][ T3258] ================================================================== [ 348.395447][ T3258] Kernel panic - not syncing: panic_on_warn set ... [ 348.402004][ T3258] CPU: 1 PID: 3258 Comm: kworker/1:1H Not tainted 5.9.0-rc8-syzkaller #0 [ 348.410378][ T3258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.420409][ T3258] Workqueue: kblockd blk_mq_run_work_fn [ 348.425920][ T3258] Call Trace: [ 348.429183][ T3258] dump_stack+0x10f/0x19d [ 348.433497][ T3258] panic+0x207/0x64a [ 348.437391][ T3258] ? vprintk_emit+0x44a/0x4f0 [ 348.442041][ T3258] kcsan_report+0x684/0x690 [ 348.446517][ T3258] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 348.452056][ T3258] ? __blk_mq_sched_dispatch_requests+0xb1/0x2a0 [ 348.458370][ T3258] ? blk_mq_sched_dispatch_requests+0x9f/0x110 [ 348.464508][ T3258] ? __blk_mq_run_hw_queue+0xee/0x1c0 [ 348.469857][ T3258] ? blk_mq_run_work_fn+0x3d/0x50 [ 348.474864][ T3258] ? process_one_work+0x3e1/0x9a0 [ 348.479861][ T3258] ? worker_thread+0x665/0xbe0 [ 348.484598][ T3258] ? kthread+0x20d/0x230 [ 348.488816][ T3258] ? ret_from_fork+0x1f/0x30 [ 348.493399][ T3258] kcsan_setup_watchpoint+0x41e/0x4a0 [ 348.498758][ T3258] __blk_mq_sched_dispatch_requests+0xb1/0x2a0 [ 348.504888][ T3258] ? update_load_avg+0x1ad/0x2d0 [ 348.509813][ T3258] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 348.515787][ T3258] __blk_mq_run_hw_queue+0xee/0x1c0 [ 348.520956][ T3258] blk_mq_run_work_fn+0x3d/0x50 [ 348.525791][ T3258] process_one_work+0x3e1/0x9a0 [ 348.530641][ T3258] worker_thread+0x665/0xbe0 [ 348.535204][ T3258] ? finish_task_switch+0x8b/0x270 [ 348.540298][ T3258] ? process_one_work+0x9a0/0x9a0 [ 348.545293][ T3258] kthread+0x20d/0x230 [ 348.549332][ T3258] ? process_one_work+0x9a0/0x9a0 [ 348.554339][ T3258] ? kthread_blkcg+0x80/0x80 [ 348.558900][ T3258] ret_from_fork+0x1f/0x30 [ 348.564455][ T3258] Kernel Offset: disabled [ 348.568760][ T3258] Rebooting in 86400 seconds..