[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.707959] random: sshd: uninitialized urandom read (32 bytes read) [ 31.926710] kauditd_printk_skb: 10 callbacks suppressed [ 31.926719] audit: type=1400 audit(1569659928.588:35): avc: denied { map } for pid=6972 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 31.968037] random: sshd: uninitialized urandom read (32 bytes read) [ 32.586011] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. [ 38.216495] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/28 08:38:55 fuzzer started [ 38.413142] audit: type=1400 audit(1569659935.078:36): avc: denied { map } for pid=6983 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 38.669990] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/28 08:38:55 dialing manager at 10.128.0.105:33163 2019/09/28 08:38:56 syscalls: 2473 2019/09/28 08:38:56 code coverage: enabled 2019/09/28 08:38:56 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/28 08:38:56 extra coverage: extra coverage is not supported by the kernel 2019/09/28 08:38:56 setuid sandbox: enabled 2019/09/28 08:38:56 namespace sandbox: enabled 2019/09/28 08:38:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/28 08:38:56 fault injection: enabled 2019/09/28 08:38:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/28 08:38:56 net packet injection: enabled 2019/09/28 08:38:56 net device setup: enabled [ 40.518517] random: crng init done 08:40:44 executing program 0: setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@dev, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x204200, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4005) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x5}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000003c0)={r4, 0x7fffffff}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000004c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000400), 0x3, r5, 0x10, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}, 0xa0) r6 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000086}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20002001}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe094fd0c84c62469}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4811) socket$can_bcm(0x1d, 0x2, 0x2) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000800)={0x5, 0x0, 0x4, {0xffffffff, 0x9, 0x1, 0x80000000}}) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000840)=0x800) r9 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0x1, 0x202000) sendto$inet6(r9, &(0x7f00000008c0)="00d7", 0x2, 0x10, 0x0, 0x0) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000900)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r11) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000940)='/dev/null\x00', 0x608800, 0x0) ioctl$EVIOCSABS3F(r12, 0x401845ff, &(0x7f0000000980)={0x57db, 0x6, 0xffa, 0x40, 0x8, 0x9}) r13 = syz_open_dev$sndpcmp(&(0x7f00000009c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a00)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r13, &(0x7f0000000a80)={0x8, 0x120, 0xfa00, {0x1, {0x1, 0x9, "6e63b10461bea7538754332f95d6e03d63d3a17dc1a8605e8ccbf538850ee974f088a34aab6280e00cae9d6b2e1c9ce922dd1bb9c31bda0913fb123cbec25291c78617028b4a9f3a2261cb22d12ae6f0f3f6e92bcff32dfa4928c65e0498e5b3f7f401c29e3f415ade3a191b861b47a60ebd0ccb089c381de1b7f03d2960d4f86afb6c5cc09dbea07e0b41260e64da3cb626937cb6b8224c28a9f73c852755f579e480aba057a331d87c8848f286d11079e9a661ebd52755bdc3a43da4dc7d68763ab13ee0f034e176214d9b681776e799bcda4910821c0f7657246e0e18693686e37ff164be79beb9cbb80c65da503f697725440a88debd2b943c207c5383f6", 0x52, 0x3f, 0x0, 0x4, 0x5, 0x0, 0x8, 0x1}, r14}}, 0x128) socketpair(0x1, 0x9335f98418420eca, 0x2, &(0x7f0000000bc0)={0xffffffffffffffff}) dup(r15) 08:40:44 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x48) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @local}}, 0xffffab97, 0x6, 0x9, 0xfff, 0xfffffffa}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x81, 0x0}}}}, 0x84) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000280)="b26fe9069b14b02043bb687dab47e24e", 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x81, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000300)={0x38, 0x0, 0x1, [{0x2, 0xc4f8, 0xa, 0x800, '/dev/dsp#\x00'}]}, 0x38) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000340)={0x0, 0x0, {0x10000, 0x1f1, 0x3, 0xcb6f}}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000400)={r4, 0xfff9}, &(0x7f0000000440)=0x8) ioctl$SIOCNRDECOBS(r3, 0x89e2) r5 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000004c0)=r5, 0x4) socketpair(0x1c, 0x4, 0x5, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000007c0)={&(0x7f0000000540), 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1bc, r7, 0x723, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x533}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xa3cb, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3800000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @empty, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x800}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000840)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8310460}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r9, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8002000) r10 = gettid() r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000940)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f0000000980)) r12 = syz_open_dev$radio(&(0x7f00000009c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(r12, 0xc008ae05, &(0x7f0000000a00)=""/143) ioctl$KVM_SET_TSS_ADDR(r11, 0xae47, 0xb800) r13 = getpgid(0x0) setpgid(r10, r13) r14 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000ac0)='/selinux/checkreqprot\x00', 0x80002, 0x0) write$P9_RRENAMEAT(r14, &(0x7f0000000b00)={0x7, 0x4b, 0x1}, 0x7) 08:40:44 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x4005) ioctl$TCFLSH(r0, 0x540b, 0xffffffff) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0xfffffff7) gettid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x951b7372372e3bf9, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x10004, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x4100, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000001c0)={0xa8, 0x5, 0xf5, {r4, r5+30000000}, 0x800, 0x3}) r6 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="956efdf78b599ba16b9490ffd2e1341cefa17203fb790a8eff80b9795d8d174df222fa65bb7bc14ddbd4867c908d25d98fc8500f3bb7ab1b80af731c1bd59932373d474c5c2a48d7e9b9392fc18ca923c08bd9b6594b4b50c92ee03cc1009cc320ea0723b60930981e09467b5d55e650e6063f29b615700d35d924d59ccb9f2a6f9930511ff13153f856394dc67cbc23b3922bea88ff62b5ead08fa87c5790a72a68f4", 0xa3, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000380)={r6, 0x59, 0x1a}, &(0x7f00000003c0)={'enc=', 'oaep', ' hash=', {'streebog512\x00'}}, &(0x7f0000000440)="87465615136dc0879fdf296a1abf9e8f9e01e2709d7aa083c7dbb69fe4e3a581287e2122d6f4551fac267abac1cfa2893c130978b4884943d119c4c6d6d124b252d770e2355129f58c935b9642b1397ed3d60dc12610f8e05b", &(0x7f00000004c0)=""/26) r7 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x10000) fgetxattr(r7, &(0x7f0000000540)=@random={'trusted.', '\x00'}, &(0x7f0000000580)=""/155, 0x9b) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000680)) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/capi/capi20\x00', 0xa2082, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r10, 0x2287, &(0x7f0000000700)=0xa434) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/audio\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000940)=0xe8) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000980)={@rand_addr="fe3de3790be6230e3435d4f467c65c2e", @dev={0xfe, 0x80, [], 0x20}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x24df0000, 0x2, 0x6, 0x0, 0xffffffffffffffff, 0x1000008, r12}) r13 = syz_open_dev$adsp(&(0x7f0000000a00)='/dev/adsp#\x00', 0x2, 0x541000) getsockopt$bt_BT_RCVMTU(r13, 0x112, 0xd, &(0x7f0000000a40)=0x800, &(0x7f0000000a80)=0x2) r14 = syz_open_dev$dspn(&(0x7f0000000ac0)='/dev/dsp#\x00', 0x7fff, 0x10000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000b00)={0xffffffffffffffff}, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r14, &(0x7f0000000b80)={0xf, 0x8, 0xfa00, {r15, 0x3}}, 0x10) r16 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c40)='nbd\x00') r18 = openat(r14, &(0x7f0000000c80)='./file0\x00', 0x40000, 0xc4) r19 = socket(0xa, 0x80000, 0x9) sendmsg$NBD_CMD_RECONFIGURE(r16, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x90020000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x80, r17, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r18}, {0x8, 0x1, r19}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x800) [ 147.803711] audit: type=1400 audit(1569660044.468:37): avc: denied { map } for pid=6983 comm="syz-fuzzer" path="/root/syzkaller-shm709253436" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 08:40:44 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x4}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x2, [{0xa, 0x0, 0x20}, {0xa, 0x2, 0x4}, {0x7, 0x5, 0xe01b}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x67, 0x7}]}, {0x0, [0x3, 0x0, 0x9, 0x1e, 0x0, 0x30, 0x30, 0x6f]}}, &(0x7f0000000200)=""/128, 0xa2, 0x80}, 0x20) ioctl$FICLONE(r1, 0x40049409, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x10040, 0x0) r3 = open(&(0x7f0000000340)='.\x00', 0x10101, 0x80) linkat(r2, &(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x400) set_tid_address(&(0x7f00000003c0)) r4 = accept(r3, &(0x7f0000000400)=@ethernet={0x0, @link_local}, &(0x7f0000000480)=0x80) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) r5 = creat(&(0x7f00000004c0)='./file0\x00', 0x48) ioctl$TIOCLINUX7(r5, 0x541c, &(0x7f0000000500)={0x7, 0x1a}) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) getpeername$unix(r6, &(0x7f0000000600), &(0x7f0000000680)=0x6e) r7 = syz_open_dev$dspn(&(0x7f00000006c0)='/dev/dsp#\x00', 0x9, 0x400) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000700)={0x8, 0x31364d59, 0x4, 0x5, 0x6, @stepwise={{0x1, 0x3}, {0x5, 0x2}, {0x80, 0x5}}}) syz_open_dev$sg(&(0x7f0000000740)='/dev/sg#\x00', 0x3, 0x440040) r8 = syz_open_dev$midi(&(0x7f0000000780)='/dev/midi#\x00', 0x8, 0x58c000) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x93) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x10000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000800)='bic\x00', 0x4) r10 = syz_open_dev$vcsn(&(0x7f0000000840)='/dev/vcs#\x00', 0x200, 0x1) ioctl$BLKSECDISCARD(r10, 0x127d, &(0x7f0000000880)=0x2) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer\x00', 0x10404, 0x0) sendmsg$kcm(r11, &(0x7f0000002440)={&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x4, @dev={[], 0x10}, 'tunl0\x00'}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000980)="14ce30146d2f900ed82580f9a48619f7f0bdd34498b6ff1af6641ecab1cd5cefc602ed0cb9d52212cd7b43451341d71e86a3a5a5128b5ee3106cb915ffe8479e665400137a720d51a3462a3f4740f0a482ccfc8753fd7fffaad906926a1a7eec", 0x60}, {&(0x7f0000000a00)="42f1d70b885c6a4c12f6f0d2906c4949b19aa5c9863831baef29e63df3075e93623e7ad06fbcc2be623a118222241e96d91bb78a88b5968e48fce22c8a2a97017aedb94913429fd8c40a9b083fbd12386f9becbc1d1bacf306d3cf937c57a0e0ccb622387ebb8da235081572da49a34add83836cd889e773a07d85d81abc2579f602a7f91191b4db34f48c10226dcdbf84fd16ba2f8ab9d996d3c173db4ae5ec4404cdae116a83f2abecaea17cc071fe8e90377037d349b6a5", 0xb9}, {&(0x7f0000000ac0)="fdd9ac4cce37b205d6e1ac5a4a6afc15370518a748f7fe31c10a396ecf3d26f845f5aa7b9be323ee01fb74535310b6dcce261cf092abed1ebee50e1dfd330285fbef7305554d2c3a099fc11fbd28d21c9d362642f222bb41091605f07aeb5f1943f0127702b6c2f2826b9ff8af27e20a12486510d5761aeac0bbbcbdf7310818eb127c5b5044b860f6ae73021194be9f25febe15a5e52a8764c3ac63ba600f11214ee3811d491219b245fcfec0c3324b6d2a1d200027ebb5ecf8c2846768594319724cd025292ebdf1a93d557c594943c8ff28eafdc159fdfa68b1e04f44709becf38a", 0xe3}, {&(0x7f0000000bc0)="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", 0xfe}, {&(0x7f0000000cc0)="6c3f994176ebea4daf58fe", 0xb}, {&(0x7f0000000d00)="c1bbcbd2180617d7ff10649f5890a21aab9e444d0d265e1c93db78a68b0115ae8d106757804760583643ad615e83dc730414e7f8c49730d448471be2345813ffe09d4515e77849d1390fb872caa488fa5af9e20804d78a6e68b756d7629be5c1943274cf409b0b1d28664ad3220491f050112428dcc808f6cda0bcc7fa486d2bfaf906d848f329872ab408744a62319bad7c16a0774378c5ae753da78d57db25776541519c25e32f07bc1d9c0fbe6451da88ce57ccef722f3f48b1e2071eaa23c2bffac9e9bf89aab8c4769090e39a4bddb59604f1dcaf130ab1136eb7dc93f57965b8162e6cae56c791", 0xea}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="8c689bfbca2227d1a5ae18b80c6183d497c02cb4fa8adeb15f4a15737fcb343c5ff88f76fa43223a167bd6a23edafef62ad7903b8d560e94b9fb5cfac1a8b5fc760212bdae03c5617e517f1f10cbce705fbdbb5434c77fdebc27d07e438fea9b8149e5f9a53e579f219fb272c67f96feefb2b4fbf9a44f320372681c8df3c2e853944965a9ac941a71d60c18c180a9c8132d1167aad21bc0fa5bcadea3859912d2ae1933eb946617dbf33d4526695de62b119419610742de5ec9223d4369aef9e3e7d337a7606fa9e82cc1e16b57e4deae2a256b1535871f0b66", 0xda}], 0x8, &(0x7f0000001f80)=[{0x108, 0x96, 0x9, "3246b4c96385c400be63b506e2dace1978f9f5b096e1f0865fccd0e142797557543f6f16b89389c1e603cd192fd7bc63da04a57aefa9c8dd07ff093771c0d8709a4a0baeda06dee00dd5326a776a7aec5c1056ce7b5c7fa7602ab2b201970fcc5d08d86b4dd795c33300a7768f736cbde4ad02f55e4ddccb114eb405caf3339c722c3b57cee0c0c1dd6d3f64c9199081d8e009e9be36cdb0359253d3ce5e308c8aa0b3b7d50412f9828cc0c186175150f15d0b089a9107ddbf71aba35885e1279562b88a041cb19307a14f592fffb69476301fc0345f3e40123db1ae8b98229ee47cef46bb1d130dfc802dc07dfeca264edb"}, {0x88, 0x0, 0x5, "9c877e04347df10e96a4e6bb012ee6f01aa894379288b7b92bbd74d2521a1d814cbac5170a5958d6d7685ccd52139c2372a545f00813513be02c59f0c0883f502c4e536aed7d862f541b31f8a0a7e23f13dbe21aa9b7d82702a3d356bee5eb4f7ea807c41ba32b4dda83a7462784696a5c40e5"}, {0x78, 0x0, 0x800, "783732be466c410b91d640e06f093eb1063a4ef9b751fd6bc34ef98214ec7c9a89bfe53538df6de39518354db0afac9b6b822834c1cd4db6543f9f433e22ce34edf5a41bdbecd664af0343792493995be24f88f3cf658f01469e8b32721fb00323e1a887"}, {0xb8, 0x11, 0x28000, "fc990ecf4a2474a6534981775a9404f16030d9af01b9549875ff37d84845d530eed083b390984ddff8507503afdd3e72509e148c7c0ac92f1829d5a6a094348675652a68f03d766e8e5ef773c2ab52d6e38a4abd14493787aa22830d25eb67773979c479a1362a22e2ceb342242be65baba2989fe3d80d6ddf0adc71ecceb7db9be55f998d24e8740d9054f9fe9a67f47f22f0caa67fc44548ba5ee4539886d6de68e1fb9b4d"}, {0x60, 0x103, 0x2, "60e1402cd9c52730d53bb9736f70fdd269041b65dc990a209697b044190db88407b959bdf8f5cef42de4b20c0123d0d12a4b4281e7ec3b8b6979f7761697bfd5b3b02f48b5add3cf660f"}, {0x110, 0x3ec, 0x5, "88f9cf6a5ed29d20c8cdb13567da60d2c74bf20ffafbc2e08cc02aff3bce851800dda88ebaf3ed3446983a9d3827502b97250e5d3284fe52cc8e487adea4c2f845851023cc30823d76ecbda42e0b5cc19a1086e99dbfddeadec12ad0a7a8778b9d2f70db14c0f7c9ad1e2738b887b46f435312d7765337d0316c90c7989c7eafc307ec382756ab77a4e77cbe4b75ec224b11378b662567e0d2bad0ff2574144ea5dcd8d6032cbc4be819d49a9f5e3590b9f7ec935d3cc35bd6919d4e32780e0f32555c4d51120ce08180c458fb193ef66c9e7622e1479ff27e7024597a55d3718e328748085c0a89ed28f8cd61aa5a667f5449c61001aae79a"}, {0x90, 0x114, 0x0, "d2175156a50db112c40555a835953bec86065fee16840674071d9ff59680df049e179dcd6224da037e48aaac99398ade43e7bd9ad699813bc35ac24b4729313fdb0cf2db724a32c0a7a03127fc2c0dbcdaffcd62eb9211edaf82b7569e02e71a766edea33359a0d0de81bfd1725f5fac98738861fbfd20892d"}], 0x4c0}, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000002480)={0x2e4e10f805b7903e, 0x80000000, 0x2}) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000024c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) recvfrom$llc(r12, &(0x7f0000002500)=""/84, 0x54, 0x80002081, &(0x7f0000002580)={0x1a, 0x5, 0x6, 0x0, 0x5, 0xc8, @local}, 0x10) connect$unix(r5, &(0x7f00000025c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$SG_IO(r5, 0x2285, &(0x7f0000002900)={0x0, 0x1, 0x8a, 0x81, @scatter={0x2, 0x0, &(0x7f0000002740)=[{&(0x7f0000002640)=""/103, 0x67}, {&(0x7f00000026c0)=""/71, 0x47}]}, &(0x7f0000002780)="08ed8e54faf45e426b6fec3b0d8b9c6a6da5ff90f3e00f0d4b0115145852431cf66cd9ea65a1292bf6668adf5afac89b1420faeb4e824a0249aefde3dc57fb9ece33956f55f7819c79011a5299ccba209c983547da5921895adff8e774ddad4324767a4db36688a5541b59912090358772c08316790583c0548786daf29ac03d55d9e92398331f69aae9", &(0x7f0000002840)=""/71, 0x7, 0x10, 0xffffffffffffffff, &(0x7f00000028c0)}) 08:40:44 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x529100, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000100)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x9, 0x88000) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xf2a, r1, 0xffffffffffffffff, 0x0, 0xf3, 0x0, 0x3, r2}]) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000240)={0x8, {{0x2, 0x4e21, @remote}}}, 0x88) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000300)={{}, [@bcast, @netrom, @bcast, @netrom, @bcast, @rose, @remote, @netrom]}, &(0x7f0000000380)=0x48, 0x1c00) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4) r5 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x3, 0x2) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000500)={0x35, 0x6, 0x0, {0x0, 0x5, 0xc, 0x0, '/dev/media#\x00'}}, 0x35) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, {0x5, 0x5d4, 0x9, 0x1}}) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0xa80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x4a0, 0x0, 0x160, 0x2a0, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f00000005c0), {[{{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x4, 0xff, 0x0, 0x0, "38aa3697fb2ffbe4d8ebf7a87dd990ee509d770595cc63bd2eaf1d71ab8a673b54cf804c95241ccb76ee78c56964aa65ba06fc58e7627a66b8da911ded7ac386"}}}, {{@arp={@empty, @empty, 0xffffff00, 0xff, @empty, {[0x0, 0x1fe, 0xff, 0x0, 0x0, 0xff]}, @mac=@dev={[], 0x24}, {[0x0, 0xff, 0x80, 0x80]}, 0xfffb, 0x2, 0x1000, 0x82, 0x0, 0x38, 'bcsh0\x00', 'nlmon0\x00', {}, {}, 0x0, 0x1}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @empty, 0x13}}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xe6}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) write$selinux_attr(r6, &(0x7f0000000b00)='system_u:object_r:crack_db_t:s0\x00', 0x20) r7 = syz_open_dev$vbi(&(0x7f0000000b40)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f0000000b80)={0x7, 0x5000}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/vga_arbiter\x00', 0x121800, 0x0) sendmsg$kcm(r8, &(0x7f0000000ec0)={&(0x7f0000000c00)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, 'eql\x00'}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)="b4d539ac63dfd6f3d920a6096712573458cf6b1e24f7ade3f5c5ae3cc30371a24720d30f2251042295124f3583bc1cadf2b746b62eae18f9e0fa05fbedd9ba0716b25fa285a01873beee37240be3d1c5ffcc17cb64d41d72bb99c5d7edde4919127834ecbd6aec81079fcccd0a98872e43f92ce14ea17263f254e205ef76406d0aa53f91ab7484eb63b2f8c229983a6a48ee3cccedff013ad2f6d9e36901e092fa3d8952", 0xa4}, {&(0x7f0000000d40)="023ed23b404321", 0x7}, {&(0x7f0000000d80)="d9336b43b1f2086168ee089fd6ad47a8398f7483076a2a8f5e4a2a0e0e10c55e5b9262288fbd3ea7c3ed466d1b9c6af1b3cf34724aa38eb2c88cccf29ace94e9aa0c83a777439a0ac9c09a75a8d869a2b5c828407a2f9ca584e823c49440c41f785c4625ddcafee6d65aff4fab49d70e419839a7356720fa8fb85295bc8e05f2b9ed98", 0x83}, {&(0x7f0000000e40)="c7e31750b1b8bf9d33e836da25dcc045450b332adc758338f5666b0c3ba716e55290aa229f7eabc2ae47a22e3dbf384245bf50116f0ccc", 0x37}], 0x4}, 0x1) r9 = dup2(r3, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000f00)={0x2, 0x2, 0x9, 0x0, "d7166cdc6b13c1f9c57fde8ea4bf7813cc5e391907ceb5e0d151b6a760a31826"}) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000f40)={0xb, 0x103, 0x2, {0x5, 0x8, 0x7, 0x5}}) write$P9_RREMOVE(r8, &(0x7f0000000f80)={0x7, 0x7b, 0x2}, 0x7) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/dsp\x00', 0x40, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000001000)={"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"}) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000001400)={'filter\x00'}, &(0x7f0000001480)=0x78) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001500)={&(0x7f00000014c0)='./file0\x00', r2}, 0x10) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000001540)={0xffffffb8, "882e341e07e4fd4ae17ec428999440d9db5c8b8095d0da1de7102b9a54e301b4", 0x2}) 08:40:44 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x2, 0x1ff, 0x3f, 0x1f, 0x6, 0xfff7, 0x0, 0x3, 0x2]}, &(0x7f00000000c0)=0x16) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x60400) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$sndseq(r2, &(0x7f00000001c0)=[{0x8, 0x7f, 0x0, 0x81, @time={r4, r5+10000000}, {0x3, 0x39}, {0x0, 0x33}, @addr={0x7f}}, {0x0, 0x6, 0x8, 0x4, @tick=0x3, {0x8, 0x5}, {0x8, 0x2e}, @result={0xe1b6, 0x8}}, {0x7f, 0x1, 0x3, 0x6, @tick=0x9, {0x8, 0x2}, {0x1, 0x6}, @connect={{0xaf, 0x2}, {0x0, 0x2}}}], 0x90) rt_sigaction(0xc, &(0x7f0000000340)={&(0x7f0000000280)="4323e2263e0f01d60f8639e819e5c4233d7c64cdfe6c67440f0d1fc421cdda999d81335c660f3a0c1600c4017a2c5fd82ef047813308000000c4a1e971e407", {0x7fff}, 0x0, &(0x7f00000002c0)="640f3a0f7f1f9dc483657dfc00c4e1cd61be0c000000450f8af5000000650f7edf65656666470f3804743f01f2420fd6de8f284887855b0f96f9003e65f041303a65660faef4"}, &(0x7f0000000400)={&(0x7f0000000380)="8fa97812ca42dd63003e4f0fae66c5c4617c50c0c4e2412f59e80f53142cc483c16c000fc442352ca800080000360f014900f0400fb17a69", {}, 0x0, &(0x7f00000003c0)="f30f1855c8f0458049da8a46745e66450f383c61412ef20f0d5ce56f2c0dc46129e39607000000c4e2cda802660f3a0dae9a0000001dc4223d9820"}, 0x8, &(0x7f0000000440)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x40800, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x5, @mcast1, 0x8}, @in6={0xa, 0x4e24, 0x8, @remote, 0xff}], 0x84) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0xd0601, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000005c0)={0x3, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$PPPIOCSFLAGS(r8, 0x40047459, &(0x7f0000000740)=0x404100b) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm_plock\x00', 0x2, 0x0) accept$inet(r9, &(0x7f00000007c0)={0x2, 0x0, @multicast2}, &(0x7f0000000800)=0x10) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840)='/dev/zero\x00', 0x8000, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0xfe4b) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000880)) r11 = syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x6b0400) fcntl$dupfd(0xffffffffffffffff, 0x406, r11) sendmsg$rds(r3, &(0x7f0000000b40)={&(0x7f0000000900)={0x2, 0x4e21, @rand_addr=0x10000}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000940)=""/254, 0xfe}, {&(0x7f0000000a40)=""/162, 0xa2}], 0x2, 0x0, 0x0, 0xc0}, 0x240048c1) r12 = getpgid(0x0) rt_tgsigqueueinfo(0x0, r12, 0x28, &(0x7f0000000b80)={0x34, 0x1, 0x1ff}) r13 = msgget(0x3, 0xa84) msgsnd(r13, &(0x7f0000000c00)={0x1, "09ccf7"}, 0xb, 0x800) ioctl$VIDIOC_G_TUNER(r11, 0xc054561d, &(0x7f0000000c40)={0x7, "f3f530c01519ec98724f110cad250862fe0294f159dfae607cf59f19d5d9e12e", 0x4, 0x200, 0x9, 0xeb, 0x10, 0x1, 0xd5a8, 0x9}) [ 147.842350] audit: type=1400 audit(1569660044.508:38): avc: denied { map } for pid=7002 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1118 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 148.211077] IPVS: ftp: loaded support on port[0] = 21 [ 149.061250] chnl_net:caif_netlink_parms(): no params data found [ 149.072139] IPVS: ftp: loaded support on port[0] = 21 [ 149.099887] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.107292] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.115927] device bridge_slave_0 entered promiscuous mode [ 149.124987] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.131695] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.139078] device bridge_slave_1 entered promiscuous mode [ 149.167191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.178457] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.203075] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.210675] team0: Port device team_slave_0 added [ 149.218271] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.225603] team0: Port device team_slave_1 added [ 149.231090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 149.242636] IPVS: ftp: loaded support on port[0] = 21 [ 149.252828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 149.342386] device hsr_slave_0 entered promiscuous mode [ 149.380434] device hsr_slave_1 entered promiscuous mode [ 149.420674] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 149.444461] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 149.453916] chnl_net:caif_netlink_parms(): no params data found [ 149.492827] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.499417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.507467] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.514168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.556642] IPVS: ftp: loaded support on port[0] = 21 [ 149.564192] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.570892] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.578158] device bridge_slave_0 entered promiscuous mode [ 149.588453] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.594931] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.602788] device bridge_slave_1 entered promiscuous mode [ 149.620254] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.630686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.688754] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.696582] team0: Port device team_slave_0 added [ 149.707928] chnl_net:caif_netlink_parms(): no params data found [ 149.722844] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.730478] team0: Port device team_slave_1 added [ 149.743522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 149.751027] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 149.802035] IPVS: ftp: loaded support on port[0] = 21 [ 149.833237] device hsr_slave_0 entered promiscuous mode [ 149.870483] device hsr_slave_1 entered promiscuous mode [ 149.921195] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 149.928688] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 149.937168] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.944111] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.952353] device bridge_slave_0 entered promiscuous mode [ 149.960722] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.967273] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.974283] device bridge_slave_1 entered promiscuous mode [ 149.987715] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.994432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.001434] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.007780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.054742] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.065295] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.091158] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.098792] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.107135] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.115288] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.131586] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.138660] team0: Port device team_slave_0 added [ 150.144471] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.151697] team0: Port device team_slave_1 added [ 150.157992] chnl_net:caif_netlink_parms(): no params data found [ 150.174366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.182673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.212896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.238624] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.245773] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.253073] device bridge_slave_0 entered promiscuous mode [ 150.262519] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.268888] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.276009] device bridge_slave_1 entered promiscuous mode [ 150.353554] device hsr_slave_0 entered promiscuous mode [ 150.420345] device hsr_slave_1 entered promiscuous mode [ 150.501475] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.517903] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.526926] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.534373] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 150.547158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.561322] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.572079] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 150.578170] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.589697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.597660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.608700] IPVS: ftp: loaded support on port[0] = 21 [ 150.618661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.628044] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.636593] team0: Port device team_slave_0 added [ 150.644812] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.651867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.659658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.667704] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.674085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.686883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.695690] team0: Port device team_slave_1 added [ 150.704494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.717534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.725787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.734166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.742123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.750799] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.757158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.774317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.799151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.809285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.853220] device hsr_slave_0 entered promiscuous mode [ 150.890494] device hsr_slave_1 entered promiscuous mode [ 150.962525] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.972996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.981292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.003438] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.047983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 151.063578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.077242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.086927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.094388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.101844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.109655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.118130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.125901] chnl_net:caif_netlink_parms(): no params data found [ 151.143766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.154214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 151.163069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.172993] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 151.179078] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.185542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.193764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.201810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.209756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.219257] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.234750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.252080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.266985] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.273832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.282437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.290525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.298736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.306632] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.313472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.322677] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 151.328823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.355792] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.363103] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.370681] device bridge_slave_0 entered promiscuous mode [ 151.377619] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.384371] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.392326] device bridge_slave_1 entered promiscuous mode [ 151.399505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.409183] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 151.423902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.432738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.440610] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.447231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.456981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.464707] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.475606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.501932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.509989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.517376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.526489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.541121] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 151.547349] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.555041] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 151.564840] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 151.577083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.584826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.649140] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.656737] team0: Port device team_slave_0 added [ 151.663146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.672844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.687000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.694693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.702954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.711379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.719366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.727574] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.734038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.741427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.749185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.757240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.764303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.771757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.778825] team0: Port device team_slave_1 added [ 151.785068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.796137] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 151.808197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.818380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 151.828910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.842603] chnl_net:caif_netlink_parms(): no params data found [ 151.854152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.863105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.871701] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.878269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.885677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.897648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.900642] audit: type=1400 audit(1569660048.558:39): avc: denied { create } for pid=7036 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 151.908013] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.943763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.949610] audit: type=1400 audit(1569660048.598:40): avc: denied { write } for pid=7036 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 151.956253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.984550] audit: type=1400 audit(1569660048.598:41): avc: denied { read } for pid=7036 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 152.017491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.025682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.032803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.041298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.050762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.061461] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 152.067554] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.076281] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 152.083189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.142672] device hsr_slave_0 entered promiscuous mode [ 152.200792] device hsr_slave_1 entered promiscuous mode 08:40:48 executing program 0: [ 152.250647] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 152.269946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.279564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.292108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:40:49 executing program 0: [ 152.305068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.320767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.329011] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.335553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.342542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 08:40:49 executing program 0: [ 152.373102] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 152.384580] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 152.393625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.408618] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.416409] bridge0: port 1(bridge_slave_0) entered disabled state 08:40:49 executing program 0: [ 152.424670] device bridge_slave_0 entered promiscuous mode [ 152.432415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.441397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.449068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.468743] 8021q: adding VLAN 0 to HW filter on device batadv0 08:40:49 executing program 0: 08:40:49 executing program 0: [ 152.489683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.505263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.524710] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.532981] bridge0: port 2(bridge_slave_1) entered disabled state 08:40:49 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x20) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080), 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xc1400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffcf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x80000001}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, r1, 0x0) unshare(0x20600) fstat(0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000200)=0x7, 0x8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) dup3(0xffffffffffffffff, r3, 0x0) [ 152.549087] device bridge_slave_1 entered promiscuous mode [ 152.587698] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 152.595060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.603731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.611677] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.618146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.625122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.634621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.644618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.653586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 152.670584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.678263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.688061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.700242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.709760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.724084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.739459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 152.752163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.760503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.768560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.776378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.785099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.794881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.804829] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.815507] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 152.822258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.830871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.837813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.847398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.857346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 152.879213] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.887584] team0: Port device team_slave_0 added [ 152.893739] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.909861] team0: Port device team_slave_1 added [ 152.916426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.924073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.932278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.946487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 152.955169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.965331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.978176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.993082] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 152.999124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.064269] device hsr_slave_0 entered promiscuous mode [ 153.100946] device hsr_slave_1 entered promiscuous mode [ 153.151112] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 153.162546] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.175906] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.183243] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 153.194106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.207579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.232680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.243923] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 153.259892] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.288639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 153.296943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.304713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.314355] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 153.321338] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.337200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 153.345819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.354492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.362713] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.369055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.377271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.386770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 153.394624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.404059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.412269] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.418733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.439920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 153.451321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.457441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.469775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.477584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.492961] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.502816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.511595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.519440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.528386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.537571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 153.551600] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 153.557707] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.565718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.586536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.593783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.608307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.620605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.627156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7091 comm=syz-executor.1 [ 153.631211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 153.658020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 153.666506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.675204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.683481] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.683518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.683881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.697790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.716129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 153.726077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 153.736441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.752412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:40:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140), 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffff9, 0x87, 0x0, @scatter={0x1, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/227, 0xe3}]}, &(0x7f00000004c0)="131e90d649572e21d83474ebef2573ecfe3427ea146441771e4e2d0a305302b23febe8ca41002b3b87f7e05b21d038153dd73781d8d5507189e81e806361aa5c440812c88a7874757e4af52ffea735019061f6d02a0af56a50cf5f14b4c4a7a9a9cb7a6d374da2baccf2fa7facb95469892429775653790f364ba18bdb7c515534c49de12d67e8", &(0x7f0000000680)=""/193, 0xffff, 0x0, 0x2, 0x0}) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 08:40:50 executing program 5: r0 = gettid() r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x101, 0x0) fadvise64(r1, 0x0, 0xff, 0x0) r2 = creat(0x0, 0x1) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240)={0xfffffff9, 0xb4, 0x20, 0x2}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000001540)=[{&(0x7f00000001c0)="c1cbc94f8e0c3d36d7b5c0d2888fabccf5864148f4f33492901c93f68aedf514ece86309d41bd6c7cd16a354056d35ee838fa4e1ece9a70638b7853b2723839ab0191aa779475bd72cfa31030f57411f0a04711c23daacc2c487d2c396e27c9a4aae595e8521cfb6291f86", 0x6b}, {&(0x7f0000001400)='XFSB', 0x4}], 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3f95, 0x101}, &(0x7f0000000140)=0x8) [ 153.765650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.777978] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.784511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.806830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.818752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.828216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 153.837862] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 153.846382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.868053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.881407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.891562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.902307] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 153.917682] hrtimer: interrupt took 36893 ns [ 153.928384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.939574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.949460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.957879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.967834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.978012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.986854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.988516] XFS (loop5): Invalid superblock magic number [ 154.001021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 154.015550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.023895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.038718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 154.048758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.058215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.084540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.099413] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 154.109319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.128671] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 154.143163] 8021q: adding VLAN 0 to HW filter on device batadv0 08:40:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, 0x0) syz_open_dev$cec(0x0, 0x2, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00\xba\x99FH\xf4\a\xaf\x04\x14\xe1\xb8d\xd4@O\xce\xbb\xe4\xdf\xc1\xe9l\x05\x9b\xd5\x1dD\xc7k\x8f\xee\xab\x920\xab\x06\xaf\xb6|&\xb7s>\xac\xebo\xb9\xcd\xfa\xb5N7\x1c!\x9c@ad\xfa\x9d\xffc\xfe\xf5[J\xe9\f\xa9\xc7\xd9e\xc9c\xddI\x94|~\x98\x8c\x14\xfb\x9c1\vu\x13\xd9\xb2\xce\x96\xe9\xdfj\xa5\xec\x19\xd8`.\x91\xdb<\xe9\x195\x81\xb1\xd1\xcbM\xc7VJ5\xb7U\xf6\xc2B\f\x13\x02\x7f\xc3\x99\xbf\xa6\xcc\xaf\xfe\xc88\xb5\xcb\xa2X\xd3\x94\x9d\xe5\xc0\\\x86?\x12 \x0e\xb0\xe8\x11z\xcd\x12Na\xf5\xbc D\x9a#\xe1\xa0h\xcb\x9dkDPp\xc4\xd2\xa7\xbejn\xfb\x03v--\xc5 \xb8\xeaq\x0f\x9a\n\xcb%\x1d\xc2\x82\x9f\x1f\xcd\xc8\x818\xa6\xea\x12\xd7\x1b?\xa0u\xb1z\xb3-\xb7\xc8\xc3\b\x1fI5\xcaxb\x0f\xfa/u\x18\xc6\x06\xa6V\xf0\xa7#5\xaeWPV\xf40xffffffffffffffff}, 0x2, 0x1}}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x3, r5, 0x0, 0x0, 0x1}}, 0x20) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000400)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000440)={0x32, r7, 0x10000, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) creat(0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2000000000fe, 0xffffffffffffffff, 0xc) r8 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) 08:40:51 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3810}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000300)={0xfffffffd, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x1d, 0x1, 0x8, 0xffffffff, 0x22, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x890b, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000a000)={&(0x7f0000008c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000009f40)=[{&(0x7f0000008cc0)=""/99, 0x63}, {0x0}, {&(0x7f0000008e80)=""/4096, 0x1000}, {&(0x7f0000009e80)=""/148, 0x94}], 0x4}, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x7, 0x1000}, 0xc) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='},security[\x00') ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000380)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0xa8001, 0x0) socket(0x9, 0x5, 0x7d) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x0, 0x9}}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffdf0, &(0x7f0000000340)=[{&(0x7f0000000400)="d71edd0bd963d31f8d59a25b4495968709526298033eb31b980d664330a72681cff9bb276f07e1da88a944ed39d377b7ae071330f0a6f317a60f12ed6817028a69c59b28cc1848275c8b6820bb278bae13b58d1c43abc1c27b124d0cdb4be86bde69d9462e2b16ea69ea48f8a6005a0e2b74dc72e086513a0e7dd6309b5432b24df6ff231f16d4fabed0742590423183f06cc929372c2f8491cf7926b6", 0xfe88}], 0x1000001a}, 0x4008001) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) 08:40:51 executing program 5: r0 = gettid() r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x101, 0x0) fadvise64(r1, 0x0, 0xff, 0x0) r2 = creat(0x0, 0x1) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240)={0xfffffff9, 0xb4, 0x20, 0x2}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000001540)=[{&(0x7f00000001c0)="c1cbc94f8e0c3d36d7b5c0d2888fabccf5864148f4f33492901c93f68aedf514ece86309d41bd6c7cd16a354056d35ee838fa4e1ece9a70638b7853b2723839ab0191aa779475bd72cfa31030f57411f0a04711c23daacc2c487d2c396e27c9a4aae595e8521cfb6291f86", 0x6b}, {&(0x7f0000001400)='XFSB', 0x4}], 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3f95, 0x101}, &(0x7f0000000140)=0x8) 08:40:51 executing program 2: memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x41) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x7) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x70) exit(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1c6) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0x80085504, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x3ff, 0x193}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r3, &(0x7f0000000340)=0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x1, @remote, 0x1ff}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x9, 0x80000000, @mcast2, 0x7}], 0x58) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 155.231642] audit: type=1400 audit(1569660051.888:42): avc: denied { syslog } for pid=7145 comm="syz-executor.4" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 155.275662] usb usb2: usbfs: process 7147 (syz-executor.4) did not claim interface 0 before use [ 155.278279] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 155.365730] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.374890] usb usb2: usbfs: process 7153 (syz-executor.1) did not claim interface 0 before use [ 155.376517] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.391934] usb usb2: usbfs: process 7153 (syz-executor.1) did not claim interface 0 before use [ 155.448120] usb usb2: usbfs: process 7168 (syz-executor.2) did not claim interface 0 before use 08:40:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0x0, 0x2, 0x0) write(r2, &(0x7f0000000080)="fc0000001c000725ab0925000900070002ab08000800000081006193210001c000000001000000000000000000039815fa2c1ec28656aaa79bb94b467e0000000a000200035a0201856c256f1a272fdf0d11512f3cadd44000000000008934", 0x5f) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0x80085504, &(0x7f0000000040)) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000200)=""/4096, &(0x7f0000000100)=0x1000) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x1000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) io_setup(0xbc000000, 0x0) [ 155.533177] usb usb2: usbfs: process 7173 (syz-executor.0) did not claim interface 0 before use [ 155.548591] XFS (loop5): Invalid superblock magic number [ 155.593117] audit: type=1400 audit(1569660052.258:43): avc: denied { map } for pid=7172 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26878 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 08:40:52 executing program 0: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x0, @remote}, @in6={0xa, 0x4e24, 0x0, @loopback}, @in={0x2, 0x0, @loopback}]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}, 0x2, 0x1}}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x3, r5, 0x0, 0x0, 0x1}}, 0x20) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000400)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000440)={0x32, r7, 0x10000, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) creat(0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2000000000fe, 0xffffffffffffffff, 0xc) r8 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) [ 155.731149] usb usb2: usbfs: process 7189 (syz-executor.0) did not claim interface 0 before use 08:40:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80085504, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="de1bd987f5942391c70c5d0d8b2bc018c3d3e105e7bc6e4d3d5ddf722a49153f30daa0237f3034cf", 0x28, 0xfffffffffffffffc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f00000005c0)={r4}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r4, 0x1}) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) 08:40:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$gfs2(&(0x7f0000000080)='g\x06\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@norgrplvb='norgrplvb'}]}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) [ 155.797460] usb usb2: usbfs: process 7198 (syz-executor.0) did not claim interface 0 before use 08:40:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', 0x0, 0x0, 0x80, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00002c050000000000000f000000"], 0x14}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) membarrier(0x8, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {0x0, 0x0, 0x0, 0x8b, 0x100000001}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa}) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000080)) ioctl(r3, 0x1000008912, &(0x7f0000000400)="01dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 155.839140] usb usb2: usbfs: process 7201 (syz-executor.5) did not claim interface 0 before use [ 155.944503] *** Guest State *** [ 155.948592] CR0: actual=0xffffffff9ffffffa, shadow=0xfffffffffffffffa, gh_mask=fffffffffffffff7 [ 155.958773] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 155.967994] CR3 = 0x0000000000000000 [ 155.975830] RSP = 0x000000000000d000 RIP = 0x00000000000001c6 [ 155.982516] RFLAGS=0x00000086 DR7 = 0x0000000000000400 [ 155.991450] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 155.998223] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.006618] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.015039] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.023298] usb usb2: usbfs: process 7208 (syz-executor.4) did not claim interface 0 before use [ 156.023403] ES: sel=0x0000, attr=0x0008b, limit=0x00000000, base=0x0000000000000000 [ 156.023422] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.040752] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.040762] GDTR: limit=0x00000000, base=0x0000000000000000 [ 156.040774] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.040781] IDTR: limit=0x00000000, base=0x0000000000000000 [ 156.040794] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.040801] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 156.040808] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 156.040814] Interruptibility = 00000000 ActivityState = 00000000 [ 156.040817] *** Host State *** [ 156.040824] RIP = 0xffffffff81174b00 RSP = 0xffff88805b647998 [ 156.040839] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 156.040846] FSBase=00007f9bb752e700 GSBase=ffff8880aef00000 TRBase=fffffe0000034000 [ 156.040853] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 156.040863] CR0=0000000080050033 CR3=00000000928d0000 CR4=00000000001426e0 [ 156.040874] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff862018e0 [ 156.040882] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 156.040885] *** Control State *** [ 156.040890] PinBased=0000003f CPUBased=b6986dfa SecondaryExec=000000e2 [ 156.040894] EntryControls=0000d1ff ExitControls=002fefff [ 156.040903] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 156.040909] VMEntry: intr_info=00000301 errcode=00000000 ilen=00000000 [ 156.040914] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001 [ 156.040919] reason=80000021 qualification=0000000000000000 [ 156.040924] IDTVectoring: info=00000000 errcode=00000000 [ 156.040928] TSC Offset = 0xffffffaa31d3c02d [ 156.040936] EPT pointer = 0x00000000a690601e [ 156.063631] usb usb2: usbfs: process 7209 (syz-executor.1) did not claim interface 0 before use [ 156.066143] Virtual processor ID = 0x0002 [ 156.080840] usb usb2: usbfs: process 7209 (syz-executor.1) did not claim interface 0 before use 08:40:52 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @multicast1}}, 0x3, 0x2, 0x6, 0x40, 0x46}, 0x98) listen(r1, 0x0) unshare(0x40000000) setrlimit(0x8, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0x0) accept(r1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x48, 0x0, 0x8, 0x2, 0x3, 0x3, 0x0, 0x40, 0x223, 0x0, 0xcec, 0x38, 0x1, 0x0, 0x0, 0x8000}, [{0x30000006, 0x1022, 0x0, 0x0, 0x0, 0x0, 0x1}], "", [[]]}, 0xffffffffffffff1e) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x1000, 0x0) 08:40:52 executing program 3: mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffffffffffff7fff}}, {@sq={'sq', 0x3d, 0x7fff}}, {@common=@cache_loose='cache=loose'}, {@sq={'sq', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0x1000}}], [{@permit_directio='permit_directio'}, {@permit_directio='permit_directio'}]}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 08:40:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000000c0)=@buf={0x3a, &(0x7f0000000080)="f8b61242e9014bfe7140c93f1733ba8e496dd96ccec73fcbed6b30fa2d02f56dc9cc935613514f3091f1ff57ec3b0f8872a4dc5ec7207c36fac6"}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PORT={0x8}]}]}, 0x28}}, 0x0) 08:40:52 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0x80085504, &(0x7f0000000040)) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) 08:40:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) clone(0x20000, &(0x7f00000001c0)="a3b30827678b4b6d86c183f7197c4fc0c140863fa2aeb27285e085c549336692619c9a39127ca4584c78ab55932a6fa9dc0a20a887c57bf6dffdc8b37531f6fbedaa695c63a938fe6a3ed58634d33d869e7340546dc5c7bfc3e632ee2fae8241324590af8ba3041893ce066e6926c409900a3fd5d972ee4cb3455d4f2a5daa615a4987278397f8272f21f8c986852d99c2f0ac72330c7099279b1d21413e062f3ac72a152cca3111e0863eee89956ad0c7211aedc7d7bcf66ea244dc36706f19a7445aa46edb385c3cc9862d9e2129589126f1e80c58760a9f37663daad39381ddd133dab78b502d", &(0x7f0000000000), &(0x7f00000000c0), 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x4000000000001b2, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x2, './file0\x00'}, 0x6e) [ 156.376779] *** Guest State *** [ 156.384969] CR0: actual=0xffffffff9ffffffa, shadow=0xfffffffffffffffa, gh_mask=fffffffffffffff7 08:40:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0xc7091d5da6839121, 0x42) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000001b40)={0x80000000, 0x6, 0x0, 0xfd9e}) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendmmsg$inet6(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x6, @ipv4={[], [], @local}, 0x391}, 0x1c, &(0x7f0000000440), 0x0, &(0x7f0000000540)=[@hopopts_2292={{0x98, 0x29, 0x36, {0x3c, 0xf, [], [@generic={0x0, 0x7a, "91e4c321f08fa08ee57c45f7ba6b09735cf86bc4eefaa08765049760d89336710e71ffc3bc5cb2d0a2eb18940012a216c3416127770c978e0e676d3fc6eebfe30543f02200a4e80fafff3f58def76fe44bc5f8a1681f6c032b5f529c832103e1a0e070bf6545505b4e8795675fb2a304d43e735f3635ba4d0b41"}]}}}], 0x98}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x7, @mcast2, 0x7}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000600)="1bbbf2350432b5244841f9fd2f3b1304ed8a0e93611836ea703c12431f6f81fed12eff7b908dc02067890af93313743a77e829d1c224201497684e2bacd7c9cb8ef13e87a1f43dc3469912e4cf", 0x4d}, {&(0x7f0000000840)="0a76818e34c5e01f6688271ddc6a9b8223336fd80f45dec14f421e93d60dd21485e2cbde3532d111ce848b5d487c3a59b36a66ad06f21a0704908e9f2f196701e06752a47822ccfe59b8bf08bbecfcb58054563d9d51c639ccfe6d8a8ab8d683536e31c85a6536f2db792360d02669c8c7c8a66073f5f16694e0d506d55c5303e6a39569ca5c5842dc45e85f3d92b50e2f7cc4fc0f634bee624a72a6dbda0fa894832e3cd806f7acaa8c0e773a85aad6a34bcbaa813e1355414bfca75567293daec7d94adf13568e8208a08c602e690ee91139e9be7e6fa624e4d8a125ee662b65d9abd3608b311d6b3ca21c3379a2a14fc1058121c82bb52734b90dc141690ed5186fcb347c02902988670ce4cb51a3ee327894ab6afb21185163ea2ec956b8f91f9eafc87b72c4a1140ffdf2ee4e64f5947ef12bc5d4be570ec180f471d2313d0b039bb08dbc8e4d6c79783e1a07bbaff29ed45afe8ef94464a777b36115bf4ae8418e7437d738d46286d78d294e0eedd79958bf4015e0088152ad5e4bb84d8ce8b8350102da6eab8b9a401049b84b6fab928f0a51c25dda3c1d7b95afa1270df23921afe0053707f74a8449f29e5009bcfb3bd366155f19ea53fc361e8aeec7c64b6f9391ed1394992af3173ab3ef35502ff9b7e23fb6e01f8bc28f41cf4a7fa9777e3a19ccf73b8c438b4429c2a49ec510e18dad9772cace6ca52f14b0af1154a5ff5aa58790a58fc043e7fa8e84cac84d74fee9a04bd222869647f8d03f2dfdc5daace2556c5e2a948259afc727e7f99b2e3c889bda4eac0d42106729c64c1f6541164bd96b27a6396e57bd3c61227b93a490ee510227605049843c6111313081d29a3b1df4816c8183e14ee339f3bac051d453f9277af3f55ce45f3ed4f1b8b5cf8b9051e46493de9b2998a56bb8f396be281b09dffe3a2aca5a774b99b2c14f0bb2d7501c159945d9689264217c632fd7737619d2357482d43d1f75f1bf3b8555a00a59f0d83d4a24239fe751b66d27bf6485f782f36aa0004f6a3d9a93cbbafa560f251bfbc97ec8544550fec643a587e185082f41ad331f6554d15728cd01e8e8855942ffd845a72adaea54fbdcfe263e6efac9dba13616ab10383d4ca4122c885478235372aee6c5b007b95167e783581c887a5037cbba70c0da2d0192ccfbba6ea60617f1c840bbb308788751a08709410000a0e0b4fbafc1cc12799247c720927e7a8b8e6c3515d6e05044aac52d3d965d3646e456b04d3807dc58916a89cc47179b3b89f1e74b33c434686faae1945f4fa9f22614d30cfcc9e277bb8e464ce5a9574b78b269e46132fa8c5196aa0940d09580bc11f83a7d51af0abdf2a30f4aaeee34bc4b0ffe8b2d62c958934495b6eb61712beaa970dbed733a6fa328c23ff3a30e8daab04908b6ac45255bc44c186cff5819451378f56c5ef100655567e7bd0f268c327c1104a5db142308d44ffde4732c52d57cc5b5c9b11a474c92b72c818f6206954e515f006d8d7c9dc90fc70a5942df353e2794fa8663c9e5219d2513c40794c210e4336479f211745aa952e070d58396f8556c6219cd2c51fb2c90d1a59061249bf63e4697dac70645b1c1de519d1125b32ee5160e4d098472109202bb60db67b0601560eed6f3c0a7126721664749cc014e74f91053cdb0c02d6dca76502c946c91495dec5e0a601e359de7d1b79cc237a54573642b0d2330e5273551010240f3461db6446acb0ec6f6087229e12919306f3d5f1f1b7f271fd5e79a4ff550c614421547a566d02ecb43cc1ef2dd3857052894a2696e95300d9b9c3481989df2ada6dc17e9c120d8d8cb81baf283a8606f9b87f664169979a9dea8edbdb07777f81bad07801f4106b117aeaf75f90306e5b88ff993394776f3d935e30622c1a889837893c1ca0951c7a7a55455713ab32864b58b8c47f3f95ce00294e0491b2ac1d340c15ef6cc5290692759ad47c778d0ac2e7b923bedf48e9a29e532c44cf7ea64359f6875348ddd8e980c52f22c95d8703b426181a3ef7a15b86e3858108a88b557ed8162f454ba022d6e6b570428442d5d5bd67ea6d181b1b318736023d2d70d8695b70ef03a60c6435d7c3658b38e2b4efa0ed6d455db0d0ea4adb3d31164633372c88ec560bc7e24918d760a23d3100cf8be61f5177ab0ed236a6a90a23c665a8e2eba043f3a4e6c31b53eaa962c2af78b21a6b4c4e8237a6feeafcfb85ffbc9eabfbdaade0f5fc90a5fe89b20e7d4092041f0c269c8f10b51bd03a4b450ee6f3c3eb8940cc20c45343b1f68d5207fefd684c22f5eb8af64b57be1a3b6c52c09919fb04fc84959c576c1321e97f0769cf2dba5435e09bcebb7bcb4dd15ca2fac9c080ed8b70456a5832811f98a1f7f5fbb03315a562b02a25c14e6b53d7a0bd5b53572f5fe98cdf62943bcee09dff51771baaeb4f0814ad3d3fecc7ca01e8273f5369e85ec82429005b68485d700bd2494e3c192624af3c8febe589e0814a38c3cd102967c67422f75ebf680d560d95d44c6953f868d29499be2b90a76b41c6ef856c8c1144c1898beda072dc74781dabfb93cdd34256184be33b87f9ddc4ae13cf5edb57bbbf095a45118c800289d5be8053ee4c9b3f7f919ffafafb063fc1bae87121e8dad950ffd2ef65ba9dce490d8aad3e8a2a85f40c7cdd912157bfc97d898a59a082a3a695739244213524c226ea83929f8a7f246822738a916b39d7d1d111dacf476b86c61b1c0bac2ce59293fd65085cc903939aba6e9b9820d971320850c8222fdd156f7ce4e9adda2309761fc296c51de9b62d7725fe7b0dc1fb676678700445aa8a4811bc6454c4c4dfd063023921486ac28c2c9027b703b355d8c09184f6ff1e3ff1bf1eaee76784fe5edbe74f1119220b168cdfc80088ab7c6dfa6baeaf988bb98b4f2e6e14fa412784576fd9a42c600310b1ffed905d4cd1792cdaa763efb68bf00f58b6c0dc92b45f012ca429189ca954357242a2c635c0f2377cb9ea147d888879009d282c16ff5d9107c2a993e9ab87a68be9897103772bf92ae1323f01491f606776f3f407388b97f4c6a822ca4a9580609dca10e1c36e22b5317395871fca56bc25991eabcbebf0dd38775e58109296455740ab03d9568f76b5d48d8d66d75ca0ebeda02fd6d98e3b56a3bd16186d2d872055f09acc136124cf1b6aba311230990f6d7267911911babe50a01455f6135f8db0f7cf9ea061509db966a2b2f50d4c28c9bf09af160be646e7a7294401302a62768824e041a5fb37289de894af424bc0560fda128818d5aaa6b445c8f97816e8700d11807aee3fce91d855606e78fa4d5d9c2f962fb54600cc131c4677d58939480b0556816f3a847aad3b840803ad7f98a06c1a0d5b8b7512ccb91736a409b80879f2f674ba2d19177b1d65992819586e019ebf62cfb70e3398574d2c5af85154c8921af7ea635c72673c148fa70ce09043f69053c20101ccb30528bfc551b72bd8d066b45d12b61340af57e381fbfff51ef41153f3ce00d05a7199e3b4edd233ad799d6053d7ebd95753ab8bff61a8558ac2c1a696f3c4499a8f126385cb3a7a975a49622afc89f5bc26da71022f0baa968a538c0579ad56bcfa4d6d5398e45993203bb766c41866b4bc88c0f629c84c99819af0143cc0551254060bc530c6ce17fb41890088d9f0514e9deaa5dc6bbd44ecf1e37d275106fc9ad19cfe90b15110f20856b13a3d0fea531e05968460a0ccf9643268ae4b9d9ca84210d7cbbe08341cca0478fa3b1dae76345665122ea24991774de493d145778e2e278905a9a5bad317dc4d672aedfa24475c8511b93df77cf12c249e8c650f00905a01f9afb6d614e8c7c07bfb164a4b9d91b05289d342c82df7bc2fcc59fcfc26fe6f7b75610896200a7ee4f04fe1a3910a4b2be1c63ad5f525552a801e9391f92bfc8d2bc9474e20e45bd87759d0aa49792fbb64491663363a4f6363d85dccc960b6696fb6be6fe0d302bb4e2ad423d19a1e3f8684896a09b9e2bd77c57cdd29b648168fc8e765950c24d3582b0f436636a4c4ae3935a9046333bed98a04a734b13a339d637cd38d63341ad0c7a9bf8feed9275a606ac008043d0811e4293e645e20090af8d5bd4b0a3dafd6e9862157945ca821bde256a4d2da23a0ef63777fbc7d5d923bb3da0c658da325a9aae7ec9721d66345d54102cd224e333e0a30ac2ce5ce59c4334dfe5056b90929a0930893f771925012e0123453459eb7cf5172319b686af3d6393ce824d537377762855f17c7d976ffc808efb17d2898973edffbf2ac80aa5855ddef88b19ce75ab821a038ed2d7fbfd791e2f55d953a5ef95a0edad6e73d297d27835cf586b487a5b05b6ca66e8eaacfc3d491139ba8ac7e078687e07323fe16da6d91de96cf2928692917f06c0a8ba90c3c0fe92cf2aa21b6fc01ef3f45838f1b3f5fbdb495a0df1846d035ee23edc05f92dce1619db1e71ce387cd70fd9096876ed8457ed6a0b1ff5a77f845a47a70ad5f46fdf4e93d8c3d1cd5137639a923dfa55bb413f23df1522598e90ad718b5cd898cdeba22348c74eb37d3377437dd97b3f75f4e2d91183632b1567f26bda780570ea256a5d1f2a3e06fa589c67cecf49b3e8e534d3e03b7e753ca0ab4854d87217bf62aaec5959a1e64c17d845a07a44656dc6b12ccee8b550dbbea78275972027e1516abf7eb022399e893f394a8af626ee063ef75ec8b1a6154ba29f55774e3a3295f83a0aea41fc6d2177714cada42c991537d4c4d7852b269a6adf9f34c2f8811ed3a61224455b643c9a348bc9d58048732fd9cf3aae6a7663855b8c9b95aa2c39602627a4fdea04ffc9c93cea3624e2b0c45b193813b231e41fa679a507a2c401aeba3ca68376107b12d0a1f8cd222af19042ca3c2d1e1735cbbe2bd871364353e28a962b29c59264c77aa9618f1946da653d1c46b5e02824392443fe1c4cc1933775c0566663bbc4f44d408b1bdf6d58becc72997008881536c2d11bfcebeef7db6c4adb02534e5f5ce8e81a304d4a19fc596a23cbbf4c80752c55cd4c6949a1a6553691b611357702dc615a9d8bb873ec74ef07f09a53c38b6d3a6dcf2a7fd983330f82e2672dc488053324fa9b8ea60c6e6360dbbe7a059073f2dba8bcfe239eaac1c396aff33140f03d7d2d4e1250937e282c28d32d3c3898aeaaf82b5a9b181e6f70275bd8e9351d2d04d165029781da812c5ac751ece976c67a34475d9c3b8b3b91a092b963240113207f248b31f44041ce37037dd024cd6064b8cbb5f91c325e39fc4c120c8e03b0dfce6d118daef07c1a982d2375a3a480a38f5e305fb584afeb7f31b738fd428cbaeba1a3aefd4294b5fee5e8150b9c5815808abfbbec96904466c240ecafc900cc71b72d2e1abb816d3591e4fcd0e744c1b3fe38ec3d4521b8d748f2c4c3f206d10cc15e2b7bb8d899bccb7827e3dc5467cb87b122d10b9e2e0eeaf3ef2a593c8421b80fb4ad636f8df81e08d80cdddea53cb9fe399266c7044627d5524b31ed37401682b04f6d927613726e9bb3b6885da50ea07d0f112f4b66c65d6c758222a4d0e632989377e620173ca77a898b957b3f03fafad18cc4c329c8e8c85e36236aa7cd5c9570ff62c1bcc62d2343c335d61801425fd8066586299c401805b09736e5013fe4d3ec6c0ca473af98671a9f4589faa671b3d59479059c2ced3fe08eb6c7710ef4bbcfbcc29db016d7de77e8935cb0a252693ae8182c0f61fbe5ac942538aa7c4ffeb6d3be627ef80babdba27102b50b", 0x1000}, {&(0x7f0000000680)="e6ab32c8f5ac767a48d4dbfad89e2a598bd698006c2be907f1221dce5595a13b0f3ffd778f6d7423676f4738e06fef43a40f3797ff2ab2fc74396f0fb0eb20f83e72e1467d64c1f5f70ef386d2fa92fc8a93c493a74a7fa0fe39a08ab8290585fe498748e97077151125e85d828cf1ff191fe6b989e8dab0f0f2ce50c0b5cca3f9c88844013080bcaf8f17cda9076935eca081a3cd793b5111cc26a6f0fb3f31c2f970aff76e14804162242b51d5dd0133", 0xb1}, {&(0x7f0000000740)="d879b0b35a8f62409d5802435c94687c5ce5b5941f70aa8c91284c3402ef4156891663055bc2fd250d4980f7605c5556143ad9f19767b8e8e29693aa09201ca9df86c946114df0eda499825df0d00a748b860e5bba70df", 0x57}, {&(0x7f0000001840)="ff35cc7fd9563d9850f61dd7320b5a8e22d9440b0850386a6d75c1dcc4c17d53d835f10e25e58d9a09cc39e7fa07f4cc067f870bd17784aff3b2c8e6f19c3dcaa6a2657403c5434d4b05b6ab0d2b73103fb3b561dbb6586b3d85720bfbfeb533e1de1fba150070cc4ccc7ddcad9a805397902d270ad9a9b441163411abde046e183c31f1e6901d0e0d5f62eb4815063b6d313a33c757f519ab298852e3a9564068d2a8d66bde4bab249cdde671c4a861e70d4c9953b7c34dfc", 0xb9}], 0x5, &(0x7f0000001980)=[@hoplimit={{0x14, 0x29, 0x34, 0x58}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x0, 0x1f, [], [@generic={0x40, 0xf7, "2bb72a1fe84c877002905aba7e49e2b81c23827a57fd0ec7b068fa48ba9df83133bc5cc2e537607df64e30d27885ee699443b90df2a1ada0446b8585f58f94afd11b05437d78dfade5494100155ddf9ce1bb1e2816e156091e8d6613e68dc04e1d1d87e073479ef172927756f283d93dea8aca822f8b9624cb9bfcacf67c8c4d983cf871b9c894da91a5e6c99e69cb8a4e6148e141732ea890da5094566ef01d1c32a46de4f0b43cc5158d0a6f973c9f64bf0a035bb0b650a3205bc9256657ae123864f4de03056d55721b109838f7c4fec66fa275b9aa6228dc9bd25bc5661b301f544fc3c035c1c644f3509a60002d3353dda09dfdec"}]}}}], 0x130}}], 0x2, 0x45) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2e26ff56", 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x4, 0x4, 0x6, 0xffff, 0x2}, &(0x7f0000000100)=0x98) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x10000, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x7, 0x101000) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000001b80)=""/75) renameat(r5, &(0x7f0000000300)='./file0\x00', r6, &(0x7f0000000380)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000007c0)={0x1, [0x0]}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)={r7, 0x4000}, &(0x7f0000000180)=0x8) r8 = getpgid(0x0) ptrace$cont(0x25, r8, 0x80000000, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') r10 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r10, 0x80085504, &(0x7f0000000040)) r11 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@hci={0x1f, r12, 0x2}, 0x80) setsockopt$inet_mreqn(r6, 0x0, 0x87f3458040ab8dcb, &(0x7f0000001c00)={@rand_addr=0x3, @multicast1, r12}, 0xc) ioctl$sock_rose_SIOCDELRT(r10, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @bcast, @rose={'rose', 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @default, @bcast]}) sendfile(r1, r9, 0x0, 0x10000000000443) [ 156.421384] usb usb2: usbfs: process 7233 (syz-executor.2) did not claim interface 0 before use [ 156.436442] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 156.496074] CR3 = 0x0000000000000000 [ 156.512176] RSP = 0x000000000000e422 RIP = 0x00000000000001c5 08:40:53 executing program 4: getgroups(0x0, 0x0) setregid(0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x100000001, 0x52200) r1 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000180), 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4c000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80020004}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a4, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @remote, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr="b9e2ac11a90f6e8989de786edef00666", 0x6}}}}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0xec, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c15c803}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffe0000, @dev={0xfe, 0x80, [], 0x1f}, 0xffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x801}, 0x4080) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x40000, 0x0) sched_setattr(0x0, 0x0, 0x5447d0e40dee964e) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pkey_free(0xffffffffffffffff) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r4, 0x80085504, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r4, 0x1, 0x0, 0x3ff, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$TCXONC(r3, 0x540a, 0x7fff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000008000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8, 0x15]}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000280)={0x0, {0x77359400}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 156.537803] RFLAGS=0x00010016 DR7 = 0x0000000000000400 [ 156.552039] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 156.568068] usb usb2: usbfs: process 7248 (syz-executor.3) did not claim interface 0 before use [ 156.577142] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.588758] usb usb2: usbfs: process 7250 (syz-executor.4) did not claim interface 0 before use [ 156.605081] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.614863] IPVS: ftp: loaded support on port[0] = 21 [ 156.635924] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.635935] ES: sel=0x0000, attr=0x0008b, limit=0x00000000, base=0x0000000000000000 [ 156.654311] usb usb2: usbfs: process 7252 (syz-executor.5) did not claim interface 0 before use [ 156.669519] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.676697] syz-executor.5 (7251) used greatest stack depth: 23552 bytes left 08:40:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="755c13e46d61736b3d30303030303030303030303032313437373737373737372c00"]) [ 156.678966] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.716546] usb usb2: usbfs: process 7250 (syz-executor.4) did not claim interface 0 before use [ 156.734827] GDTR: limit=0x00000000, base=0x0000000000000000 [ 156.746182] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.757242] IDTR: limit=0x00000000, base=0x0000000000000000 [ 156.791422] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.799442] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 156.808226] hfsplus: unable to parse mount options [ 156.835620] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 156.869795] Interruptibility = 00000000 ActivityState = 00000000 [ 156.878610] hfsplus: unable to parse mount options 08:40:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xf6, 0x800200) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0x80, @mcast1}, {0xa, 0x4e23, 0x100, @ipv4={[], [], @multicast1}, 0x100}, 0x7, [0xef5b, 0x8001, 0x80000000, 0x4, 0x7fff, 0x3, 0x7849edbd, 0x7]}, 0x5c) close(r2) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000000c0)={0x80, 0xfffffffa, 0x2, 0x5, 0x6, 0x2ba}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x75}, [@alu={0x4, 0x1, 0x8}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff6e, 0x10, &(0x7f00000002c0), 0x10}, 0x3a) [ 156.884969] usb usb2: usbfs: process 7221 (syz-executor.2) did not claim interface 1 before use [ 156.885776] *** Host State *** [ 156.899105] RIP = 0xffffffff81174b00 RSP = 0xffff88805a41f998 [ 156.905797] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 08:40:53 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0x80085504, &(0x7f0000000040)) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 156.928828] FSBase=00007f9bb750c700 GSBase=ffff8880aef00000 TRBase=fffffe0000003000 [ 156.936283] usb usb2: usbfs: process 7269 (syz-executor.4) did not claim interface 0 before use [ 156.961712] audit: type=1400 audit(1569660053.618:44): avc: denied { create } for pid=7267 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:40:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 156.964484] usb usb2: usbfs: process 7269 (syz-executor.4) did not claim interface 0 before use [ 156.997361] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 157.006921] CR0=0000000080050033 CR3=00000000928d0000 CR4=00000000001426e0 [ 157.045364] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 157.064750] FAT-fs (loop2): Filesystem has been set read-only [ 157.072202] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff862018e0 [ 157.081782] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 157.088005] *** Control State *** [ 157.092189] PinBased=0000003f CPUBased=b6986dfa SecondaryExec=000000e2 [ 157.099160] EntryControls=0000d1ff ExitControls=002fefff [ 157.105240] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 157.112911] VMEntry: intr_info=8000030e errcode=00000000 ilen=00000000 [ 157.119679] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001 [ 157.134302] reason=80000021 qualification=0000000000000000 [ 157.154021] IDTVectoring: info=00000000 errcode=00000000 [ 157.162274] TSC Offset = 0xffffffa9fed48366 [ 157.170611] EPT pointer = 0x000000008514e01e [ 157.183448] IPVS: ftp: loaded support on port[0] = 21 [ 157.185916] Virtual processor ID = 0x0002 08:40:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000380)=""/4096) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfffffffffffffd19, 0x4008000, 0x0, 0xb4) getpgrp(r2) [ 157.270666] usb usb2: usbfs: process 7288 (syz-executor.2) did not claim interface 0 before use [ 157.292081] usb usb2: usbfs: process 7248 (syz-executor.3) did not claim interface 0 before use [ 157.493229] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 157.501237] FAT-fs (loop2): Filesystem has been set read-only 08:40:54 executing program 1: socket$key(0xf, 0x3, 0x2) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8080100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1f, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) read$char_usb(r0, &(0x7f0000000080)=""/187, 0xbb) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 08:40:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 08:40:54 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x81, 0x4001) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x401, @empty, 0x10001}}}, 0x88) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0x80085504, &(0x7f0000000040)) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x15d) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r3, 0x0, 0x27, &(0x7f0000000380)='em0!ppp1eth1\xb3-\xbf@nodevselinux#em1)[self\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r2, 0x0, 0x5, &(0x7f0000000100)='quiet', r5}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x7, 0x6, 0xffffffff, 0x9, 'syz0\x00', 0x3}, 0x4, 0x2, 0x8, r6, 0x8, 0x8aa, 'syz0\x00', &(0x7f00000002c0)=['hfs\x00', '(keyring\\\x00', '^\x00', '\x00', 'session', '&{}#\x00', 'dir_umask', 'mime_type\x00'], 0x30, [], [0x7ff, 0x4, 0x1, 0x2]}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@session={'session'}}, {@quiet='quiet'}, {@dir_umask={'dir_umask'}}]}) 08:40:54 executing program 0: futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8001, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'ipddp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x61da6befaf4be681}}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000040), 0x0) 08:40:54 executing program 3: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@case_sensitive_no='case_sensitive=no'}, {@disable_sparse_yes='disable_sparse=yes'}, {@disable_sparse_no='disable_sparse=no'}, {@errors_recover='errors=recover'}, {@disable_sparse_no='disable_sparse=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@fmask={'fmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@show_sys_files_no='show_sys_files=no'}, {@show_sys_files_yes='show_sys_files=yes'}], [{@uid_eq={'uid'}}]}) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000040)) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 08:40:54 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0x80085504, &(0x7f0000000040)) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) [ 157.889233] usb usb2: usbfs: process 7302 (syz-executor.4) did not claim interface 0 before use [ 157.912562] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 157.949339] usb usb2: usbfs: process 7314 (syz-executor.3) did not claim interface 0 before use [ 157.970242] hfs: invalid session number or type of track [ 157.982912] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. 08:40:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x7fff, 0xd54647d5afe0dd68) connect$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x2, 0x5, 0x1b37, 0x81c, "b8bdb8e20ee72f9c1019fa490d0204dd37231ce8cb5b496b0516a79bac9ef2fe4eaf20a9183de5ba4d4f30cf871e05fc9c9f2981afafee9758297159c364ca", 0x2}, 0x60) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r6 = socket$l2tp(0x18, 0x1, 0x1) r7 = inotify_init1(0x6894ce81398bed06) r8 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r8, 0x80085504, &(0x7f0000000040)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000240), 0x4) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000000c0)={0x7f, 0x6, 0x4, 0x0, 0x0, [{r6, 0x0, 0x4014}, {r0, 0x0, 0x9}, {r7, 0x0, 0x100000001}, {r3, 0x0, 0x1000}]}) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) ftruncate(r9, 0x200004) [ 157.998732] hfs: can't find a HFS filesystem on dev loop4 [ 158.006001] ntfs: (device loop3): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 158.025743] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 158.058248] usb usb2: usbfs: process 7302 (syz-executor.4) did not claim interface 0 before use [ 158.165782] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 158.210817] usb usb2: usbfs: process 7331 (syz-executor.5) did not claim interface 0 before use 08:40:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000300)={0x0, 0x7, 0x8bb, 0x6}) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r5, 0x80085504, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x10}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e21, 0x1, @loopback, 0x3}}}, 0x84) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r7, 0x80085504, &(0x7f0000000040)) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(r0, 0x0, 0x0) r8 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="0e96fed4a7249e4a4a2dd3598021a046dea4d237c7d31dd4276720c87a8c37d639dcbcb967c7c40ca4bbde2403ff0a0ddf25bb65db567c8da211cc896a9111b9db76c9c1f25b7773bbd94d87fe90421a6a0ac03b82a7beb60174355e5c1cbbce8a9492132286aaaafa73eaa81f762bf35043252168eda7c4fcda3c8d467d314f3b8f4704d7311f7e5c19f1fc44f956c1916bfb408ee25b6ec2ee13f6c005de32d1bf73e5e1cb6812dd7ae37f2a73ffcb52f1d0023bf7ea8c678c1e958bb8388037fdaa353bb27c6bda1a50a6e89ac52011c65581b329f9f0e58d06eeb05c6b67f608ccb4363d68ccc156b996862c6dd77a85ad6c34ffc97083ab7ff241712c5f7bf5f3d3ce968b8586f3bbff9086f25070724dc8e930e65f919412a26d6df31da4b56185b292b2c26248f5eaac431bb72b2190079b200fbb7a43eec0e77e9f90242e09d3df777d5933da2b90fce3778c9d34f7271bf0baa92cfe38d47e5fb2bb33e5e09892356341a441ba578e60095165969e3c8afe9059cd9b9182cb058e419dde364328e0172ed7a35e84097fa5fc813ecf23fb99fd26fcfb5a02c29d77cae03fea13da1f632fb8ce61b3c9fc6481a71b6f2fd986c0a6b345c5bbc77ced66cca82fb2e90ce6930c4ba3f4791013bb2036035ce2d341cf4090e27be4daf96c497b5cd282f731e3eb0b8c03b0d50f50d9f6f67c19aa7d19b80cc445f50ac7f6184a52cae63a04bca2b1764b1fc34e54bd4e1a297488f22fe51bc62563c8af8eacafd22ef916ea5604d42e24edbd5251c6ea65affe17ef11ac59c81f09cc70a01b80e0f1c70a091f7779b814766b97516376d1eba6b735bf4f42a3af2f4f7a86239b089e4cb93a04d6ff58b9f51ea69160051ca76caf098aa8c50934e3c536422d215006044f0a3514abc09582d5126d6659431299a56eba3fa32dc9161a3980734a00c27e730cb9ff4982599305b7e1d5a17a6cbb99d565a3ed2cbecf85cbef163a2e92b58331ba199dede532f36f3da9f1c9989f91d1e36d48d8e972ab604e4a673adb8e02529de9318d27743a9b8ad845bceab4de66f3d2ff024c088e07e10f4cdcd84782bc5b949c8beeb8f5d61ae7e84c8ec2d1c66c48c147010457438652688355dcf1f3cd4a36c2aec029e8c05502318658f307cfe40ac2de805825495a939e9cec67e4b16866f04f4c76a4eb26c9ed15f0907a8ccbf76bfa86a3ca12465649a082313dbbb30a413336229feaf87164f1ce3218cb99e8a2c527e93c4a46c18ace391e726bd29eafb678ff7d6263be29eb26140b8478036ca8132166369c702d228917ffa1946a342aad8da6d7b46a711cb2391c39b8381e00b845c1eac6b53a0da21eda79a75e45bb1ed9d73185b576b99046ddff56ab20b8eac0340d1ce035f278b7c0a887cccce26917a8e18d1a8b36748b284e98433450c4eb057ccac2599609180d1ec234b2cb496d10affd7f7cb55f072870a05a57526ba55ca2c2169b369ba964d3b7ebb5c112171264bc56c466291dc0335e2db1a689b995323cb1d5b37e89d7f3db700e72b390a8fe40510fb8466a809dbd2cace559146cbc357894d350f54d1d3e41438abdd4f888606180bd28756122d67930a5fbe5b14c99cb9f5e07b9891da0c70d8f837a3a0234ab7189e629301fc59bbdb982e89f99e244b0f0f6303383fd3117e213aa73c9ac6d5cd4dabfd74ee4371a63792714c972bc09bdd5ed3df33810f2141f5fd621f0", 0xffb2, 0xfffffffffffffffe) keyctl$revoke(0x3, r8) keyctl$get_security(0x11, r8, &(0x7f0000000440)=""/204, 0xcc) 08:40:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x2001007f) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x200001) r3 = geteuid() setreuid(r3, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x10000, 0x4, &(0x7f0000000480)=[{&(0x7f0000000200)="b6464b160fc9cd3fc0f4f41e789246e46a53ddc0436d888e074ed122884b61b609cca737066671fe5d0dd81dba37ca32545dc7943e53e4b6a3feda94346a52d639b1a99a9f6eb3aa0437f12cfc72", 0x4e, 0x6a64}, {&(0x7f0000000380)="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", 0xff, 0x37b2}, {&(0x7f0000000580)="87d1f54c4558e122464a8f002646a956121ea4ab406f1845f419652409f6c1e9a26cc5fd2017cd6ce37266c46a8cbf2431a3e4da27dbc36483d877462b0dd5c55329a2144ca3ad44516ea9ea4620bd9247e94203a0ad561e1e181701f5e2334eb7c6345bcd7bbf298e71e15c7c9afcb8ecb4a467f99ac657d0eb7e17734d360a0008fd1f9bb04edb345b1e0b9f55d81292cc9b39ffed25b1d928be259b0f77a5511e849452e6d2a22d8c377debf0be96dc86b9871c67febf3ecc4676658a0694be0c39cb7faaca4f", 0xc8, 0x8000}, {&(0x7f0000000280)="16af0eae43b70958fd60e16a87d6d0cfd4020bfe1598848dcfe0b987b3cee856571df9b03a418294ff1f16beead50714fec0f90d22c82d0f26fa51256681b80cf5598454932903ab91ab450af2eee15c788fa3094e4736002b", 0x59, 0x5c68}], 0x10000, &(0x7f0000000680)={[{@fat=@check_relaxed='check=relaxed'}, {@nodots='nodots'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@dots='dots'}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@fat=@fmask={'fmask', 0x3d, 0x88c0000000000000}}, {@nodots='nodots'}], [{@fowner_gt={'fowner>', r3}}]}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x101, 0x5, 0xe0, 0x7, 0xe, 0x2, 0x2a, 0x8, 0x4, 0x2, 0x6, 0x3}) [ 158.263054] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 158.297674] ntfs: (device loop3): read_ntfs_boot_sector(): Could not find a valid backup boot sector. 08:40:55 executing program 3: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80085504, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2002220}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf4, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff0a5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x296a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0xb) mkdir(&(0x7f0000000000)='./file0/f.le.\x00', 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f00000001c0)='.//ile0\x00', r3, &(0x7f0000000280)='./file2\x00') fchmodat(r3, &(0x7f0000000240)='./file2\x00', 0x0) [ 158.460384] usb usb2: usbfs: process 7341 (syz-executor.3) did not claim interface 0 before use [ 158.486438] usb usb2: usbfs: process 7341 (syz-executor.3) did not claim interface 0 before use [ 158.549150] overlayfs: filesystem on './file0' not supported as upperdir [ 158.550012] usb usb2: usbfs: process 7346 (syz-executor.3) did not claim interface 0 before use [ 158.584454] usb usb2: usbfs: process 7341 (syz-executor.3) did not claim interface 0 before use 08:40:55 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0x2a}], 0x1, 0x600) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37, 0x2, &(0x7f00000003c0)={0x9, @remote={[], 0x1}}, 0x12) write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xb) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x2174) 08:40:55 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 04096'], 0x1, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x40004, 0x0, [0x80000000, 0x7, 0x9, 0x2, 0x9, 0x4, 0x4, 0x2]}) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0x80085504, &(0x7f0000000040)) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x400, &(0x7f0000000300)=0x2) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000440)='X', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 08:40:55 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x15) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x139, 0xfffffffffffffffe}) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r1, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x800, 0x12) syz_open_dev$char_usb(0xc, 0xb4, 0x9) umount2(&(0x7f0000000140)='./file0\x00', 0xb) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0xc020, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x100) [ 158.707524] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 158.740902] FAT-fs (loop2): Filesystem has been set read-only [ 158.773390] usb usb2: usbfs: process 7335 (syz-executor.4) did not claim interface 0 before use [ 158.901103] usb usb2: usbfs: process 7359 (syz-executor.5) did not claim interface 0 before use [ 158.921568] usb usb2: usbfs: process 7361 (syz-executor.2) did not claim interface 0 before use 08:40:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d63703836342c696f636861727365743dcfa91d3d545199cbe541edde844263703934392c006ee2eb47f852b6a51b526fac93b9f1cfb4b3f97ad089a3776e26a77277f31ecf112395b8adc510325dd8b7420ac74fbdfb5bf90e59325502ca95ffffffffffb2e8e36ace957a79070c6665132fca17dfbb7c636f996e76dd408dcba5383a115605f50e06a15ee69ee2f4606e57cdae9700000000000000000000008253d711cfc15a44d386907571b4a02a565c86e8bdfeb7bde543672c47df8bbb808828d5ac03d05e6fbf3056"]) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000000c0)={0xfffffc01, 0x8, 0x4, 0x4, 0xd587}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'bpq0\x00', {0x2, 0x4e24, @multicast2}}) [ 158.947346] encrypted_key: keyword 'new' not allowed when called from .update method [ 158.985996] usb usb2: usbfs: process 7364 (syz-executor.2) did not claim interface 0 before use 08:40:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x1, 0x100) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) [ 159.037893] usb usb2: usbfs: process 7335 (syz-executor.4) did not claim interface 0 before use [ 159.064897] list_add double add: new=ffff888058db0c98, prev=ffff888058db0c98, next=ffff8880929fe5c0. [ 159.074680] ------------[ cut here ]------------ [ 159.079584] kernel BUG at lib/list_debug.c:29! [ 159.085561] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 159.090924] Modules linked in: [ 159.094212] CPU: 1 PID: 7365 Comm: syz-executor.3 Not tainted 4.14.146 #0 [ 159.101136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.111191] task: ffff888058d4a300 task.stack: ffff888058d58000 [ 159.117264] RIP: 0010:__list_add_valid.cold+0x26/0x3c [ 159.122448] RSP: 0018:ffff888058d5fa00 EFLAGS: 00010282 [ 159.127811] RAX: 0000000000000058 RBX: ffff8880929fe580 RCX: 0000000000000000 08:40:55 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06003917b49600b8"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80085504, &(0x7f0000000040)) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000000)={0x25bab0e, 0x4, 0x4, 0xfffffff9}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 159.135256] RDX: 000000000000d77b RSI: ffffffff814b2e55 RDI: ffffed100b1abf36 [ 159.142526] RBP: ffff888058d5fa18 R08: 0000000000000058 R09: ffff888058d4abc8 [ 159.149996] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880929fe5c0 [ 159.157268] R13: ffff888058db0c98 R14: ffff888058db0c98 R15: ffff888058db0c98 [ 159.164544] FS: 00007fa3900ea700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 159.173046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.178960] CR2: 00007faf1df59000 CR3: 000000008b0ec000 CR4: 00000000001426e0 [ 159.186239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.193514] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.200902] Call Trace: [ 159.203520] ? _raw_spin_lock+0x37/0x40 [ 159.207500] p9_fd_request+0xe3/0x2b0 [ 159.211563] p9_client_rpc+0x21b/0x1180 [ 159.215542] ? p9_client_prepare_req.part.0+0xa90/0xa90 [ 159.220908] ? trace_hardirqs_on_caller+0x400/0x590 [ 159.226026] ? trace_hardirqs_on+0xd/0x10 [ 159.230176] ? finish_wait+0x260/0x260 [ 159.233472] kobject: 'loop1' (ffff8880a49dc9a0): kobject_uevent_env [ 159.234239] ? destroy_inode+0xc7/0x120 [ 159.244282] kobject: 'loop1' (ffff8880a49dc9a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 159.244596] ? evict+0x3e6/0x630 [ 159.257564] p9_client_clunk+0x89/0x150 [ 159.261547] v9fs_dentry_release+0x6d/0xd0 [ 159.266141] ? v9fs_cached_dentry_delete+0x40/0x40 [ 159.266802] usb usb2: usbfs: process 7382 (syz-executor.2) did not claim interface 0 before use [ 159.271163] __dentry_kill+0x39a/0x580 [ 159.271171] ? dput.part.0+0x2a/0x750 [ 159.271180] ? dput.part.0+0x2a/0x750 [ 159.271186] dput.part.0+0x59f/0x750 [ 159.271194] do_one_tree+0x44/0x50 [ 159.271202] shrink_dcache_for_umount+0x67/0x140 [ 159.271210] generic_shutdown_super+0x6d/0x370 [ 159.271216] kill_anon_super+0x3f/0x60 [ 159.271226] v9fs_kill_super+0x3e/0xa0 [ 159.271234] deactivate_locked_super+0x74/0xe0 [ 159.271241] deactivate_super+0x85/0xa0 [ 159.271250] cleanup_mnt+0xb2/0x150 [ 159.271258] __cleanup_mnt+0x16/0x20 [ 159.271266] task_work_run+0x114/0x190 08:40:56 executing program 1: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x10001, 0x280) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0xfffffffffffffffc) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="aca154004286b9d3c072939d5f4b8e699771f691e3d1dffaabb4f20eee2c3a9d40b934e55036f7bc2df8bba486f2d99e604d7b09488e13ccf3b90f5ef8d9f26b2c7393035ceb2ec6110ca6bddb1bbff5d07ca31d3be026fa8a6488509f2b99a7", @ANYRESOCT], 0x77) fsetxattr$security_capability(r4, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0) sendfile(r4, r4, &(0x7f00000001c0), 0xa198) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x30a942b5235c9238, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x220010}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xed}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) r6 = fcntl$dupfd(r1, 0x0, r1) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r7 = getpid() sched_setattr(r7, 0x0, 0x0) r8 = getpid() sched_setattr(r8, 0x0, 0x0) tkill(r8, 0x34) r9 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6c, 0x280) ioctl$ASHMEM_SET_PROT_MASK(r9, 0x40087705, &(0x7f00000000c0)={0xba9, 0x9}) fcntl$setstatus(r1, 0x4, 0x80000000002c00) [ 159.271277] exit_to_usermode_loop+0x1da/0x220 [ 159.271285] do_syscall_64+0x4bc/0x640 [ 159.271291] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.271303] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 159.271309] RIP: 0033:0x459a29 [ 159.271313] RSP: 002b:00007fa3900e9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 159.271321] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000459a29 [ 159.271325] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000140 [ 159.271330] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 159.271335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa3900ea6d4 [ 159.271341] R13: 00000000004c91e3 R14: 00000000004e0530 R15: 00000000ffffffff [ 159.271349] Code: e9 56 ff ff ff 4c 89 e1 48 c7 c7 80 30 9d 86 e8 4f a8 72 fe 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 c0 [ 159.372682] kobject: 'loop5' (ffff8880a4b1f420): kobject_uevent_env [ 159.374049] 31 9d 86 e8 38 a8 72 fe <0f> 0b 48 89 f1 48 c7 c7 40 31 9d 86 4c 89 e6 e8 24 a8 72 fe 0f [ 159.374126] RIP: __list_add_valid.cold+0x26/0x3c RSP: ffff888058d5fa00 [ 159.374743] ---[ end trace 4460704f10d51df9 ]--- [ 159.381817] kobject: 'loop2' (ffff8880a4a16a20): kobject_uevent_env [ 159.389413] Kernel panic - not syncing: Fatal exception [ 159.400102] kobject: 'loop5' (ffff8880a4b1f420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 159.418205] Kernel Offset: disabled [ 159.471134] Rebooting in 86400 seconds..