executing program 2: 17:45:24 executing program 0: 17:45:25 executing program 4: 17:45:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:25 executing program 3: 17:45:25 executing program 0: 17:45:25 executing program 2: 17:45:25 executing program 4: 17:45:25 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 435.458757][T12359] FAT-fs (loop5): invalid media value (0x00) [ 435.498571][T12359] FAT-fs (loop5): Can't find a valid FAT filesystem 17:45:25 executing program 3: [ 435.505222][ T27] audit: type=1804 audit(1581788725.304:153): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/116/bus" dev="sda1" ino=16545 res=1 17:45:25 executing program 4: 17:45:25 executing program 2: 17:45:25 executing program 0: 17:45:25 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:25 executing program 3: 17:45:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:25 executing program 4: 17:45:25 executing program 2: 17:45:25 executing program 0: 17:45:25 executing program 3: [ 436.056697][T12389] overlayfs: failed to resolve './file0': -2 17:45:25 executing program 4: 17:45:25 executing program 2: [ 436.157914][ T27] audit: type=1804 audit(1581788725.954:154): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/117/bus" dev="sda1" ino=16545 res=1 17:45:26 executing program 0: 17:45:26 executing program 2: [ 436.295720][ T27] audit: type=1804 audit(1581788725.954:155): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/117/bus" dev="sda1" ino=16545 res=1 17:45:26 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) [ 436.323125][ T27] audit: type=1804 audit(1581788725.954:156): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/117/bus" dev="sda1" ino=16545 res=1 17:45:26 executing program 3: 17:45:26 executing program 4: 17:45:26 executing program 0: 17:45:26 executing program 2: [ 436.570675][T12411] overlayfs: failed to resolve './file0': -2 17:45:26 executing program 3: 17:45:26 executing program 4: [ 436.673282][ T27] audit: type=1804 audit(1581788726.474:157): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/118/bus" dev="sda1" ino=16514 res=1 17:45:26 executing program 3: 17:45:26 executing program 0: 17:45:26 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 436.789121][ T27] audit: type=1804 audit(1581788726.514:158): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/118/bus" dev="sda1" ino=16514 res=1 17:45:26 executing program 2: [ 436.906067][ T27] audit: type=1804 audit(1581788726.524:159): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/118/bus" dev="sda1" ino=16514 res=1 17:45:26 executing program 0: 17:45:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:26 executing program 4: [ 437.036579][T12434] overlayfs: failed to resolve './file0': -2 17:45:26 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:26 executing program 3: 17:45:26 executing program 0: 17:45:26 executing program 2: [ 437.221802][ T27] audit: type=1804 audit(1581788727.024:160): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/119/bus" dev="sda1" ino=16673 res=1 17:45:27 executing program 0: 17:45:27 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:27 executing program 3: 17:45:27 executing program 2: 17:45:27 executing program 4: 17:45:27 executing program 0: 17:45:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:27 executing program 0: 17:45:27 executing program 4: 17:45:27 executing program 3: 17:45:27 executing program 0: 17:45:27 executing program 0: [ 437.828244][T12469] attempt to access beyond end of device 17:45:27 executing program 2: 17:45:27 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:27 executing program 0: [ 437.949113][T12469] loop5: rw=2049, want=78, limit=63 [ 437.954366][T12469] buffer_io_error: 46 callbacks suppressed [ 437.954424][T12469] Buffer I/O error on dev loop5, logical block 77, lost async page write 17:45:27 executing program 3: [ 438.051379][T12469] attempt to access beyond end of device [ 438.072203][T12469] loop5: rw=2049, want=79, limit=63 [ 438.094796][T12469] Buffer I/O error on dev loop5, logical block 78, lost async page write 17:45:27 executing program 4: 17:45:27 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 438.128712][T12469] attempt to access beyond end of device [ 438.151947][T12469] loop5: rw=2049, want=80, limit=63 [ 438.171654][T12469] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 438.198601][T12469] attempt to access beyond end of device [ 438.271107][T12469] loop5: rw=2049, want=81, limit=63 [ 438.276408][T12469] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 438.318950][T12469] attempt to access beyond end of device [ 438.324655][T12469] loop5: rw=2049, want=130, limit=63 [ 438.344219][T12469] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 438.354236][T12469] attempt to access beyond end of device [ 438.360064][T12469] loop5: rw=2049, want=131, limit=63 [ 438.365470][T12469] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 438.376435][T12469] attempt to access beyond end of device [ 438.410484][T12469] loop5: rw=2049, want=132, limit=63 [ 438.422611][T12469] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 438.439849][T12469] attempt to access beyond end of device [ 438.445551][T12469] loop5: rw=2049, want=133, limit=63 [ 438.453772][T12469] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 438.463230][T12469] attempt to access beyond end of device [ 438.470655][T12469] loop5: rw=2049, want=142, limit=63 [ 438.475964][T12469] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 438.485557][T12469] attempt to access beyond end of device [ 438.492887][T12469] loop5: rw=2049, want=143, limit=63 [ 438.498183][T12469] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 438.507488][T12469] attempt to access beyond end of device [ 438.513245][T12469] loop5: rw=2049, want=144, limit=63 [ 438.518578][T12469] attempt to access beyond end of device [ 438.524212][T12469] loop5: rw=2049, want=145, limit=63 [ 438.529778][T12469] attempt to access beyond end of device [ 438.535410][T12469] loop5: rw=2049, want=153, limit=63 17:45:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:28 executing program 0: 17:45:28 executing program 2: 17:45:28 executing program 3: 17:45:28 executing program 4: 17:45:28 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:28 executing program 2: 17:45:28 executing program 4: 17:45:28 executing program 3: 17:45:28 executing program 0: 17:45:28 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:28 executing program 0: [ 438.963240][T12512] attempt to access beyond end of device [ 438.988688][T12512] loop5: rw=2049, want=78, limit=63 [ 438.998786][T12512] attempt to access beyond end of device [ 439.018252][T12512] loop5: rw=2049, want=79, limit=63 [ 439.054063][T12512] attempt to access beyond end of device [ 439.099664][T12512] loop5: rw=2049, want=80, limit=63 [ 439.148646][T12512] attempt to access beyond end of device [ 439.169572][T12512] loop5: rw=2049, want=81, limit=63 [ 439.188779][T12512] attempt to access beyond end of device [ 439.203315][T12512] loop5: rw=2049, want=130, limit=63 [ 439.216326][T12512] attempt to access beyond end of device [ 439.223628][T12512] loop5: rw=2049, want=131, limit=63 [ 439.229026][T12512] attempt to access beyond end of device [ 439.234825][T12512] loop5: rw=2049, want=132, limit=63 [ 439.253513][T12512] attempt to access beyond end of device [ 439.259875][T12512] loop5: rw=2049, want=133, limit=63 [ 439.265295][T12512] attempt to access beyond end of device [ 439.271431][T12512] loop5: rw=2049, want=142, limit=63 [ 439.276791][T12512] attempt to access beyond end of device [ 439.282951][T12512] loop5: rw=2049, want=143, limit=63 [ 439.288377][T12512] attempt to access beyond end of device [ 439.294287][T12512] loop5: rw=2049, want=144, limit=63 [ 439.299902][T12512] attempt to access beyond end of device [ 439.305567][T12512] loop5: rw=2049, want=145, limit=63 [ 439.310944][T12512] attempt to access beyond end of device [ 439.316568][T12512] loop5: rw=2049, want=153, limit=63 [ 439.322908][T12522] attempt to access beyond end of device [ 439.330074][T12522] loop5: rw=2049, want=78, limit=63 [ 439.335309][T12522] attempt to access beyond end of device [ 439.340983][T12522] loop5: rw=2049, want=79, limit=63 [ 439.346212][T12522] attempt to access beyond end of device [ 439.352136][T12522] loop5: rw=2049, want=80, limit=63 [ 439.357366][T12522] attempt to access beyond end of device [ 439.363045][T12522] loop5: rw=2049, want=81, limit=63 17:45:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:29 executing program 4: 17:45:29 executing program 2: 17:45:29 executing program 3: 17:45:29 executing program 0: 17:45:29 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:29 executing program 4: 17:45:29 executing program 3: [ 439.552377][T12539] overlayfs: missing 'lowerdir' 17:45:29 executing program 2: 17:45:29 executing program 0: 17:45:29 executing program 0: [ 439.715805][T12545] attempt to access beyond end of device [ 439.740835][T12545] loop5: rw=2049, want=78, limit=63 17:45:29 executing program 3: [ 439.791048][T12545] attempt to access beyond end of device [ 439.848615][T12545] loop5: rw=2049, want=79, limit=63 [ 439.880915][T12545] attempt to access beyond end of device [ 439.912160][T12545] loop5: rw=2049, want=80, limit=63 [ 439.968760][T12545] attempt to access beyond end of device [ 439.983884][T12545] loop5: rw=2049, want=81, limit=63 [ 440.020867][T12545] attempt to access beyond end of device [ 440.041011][T12545] loop5: rw=2049, want=130, limit=63 [ 440.046404][T12545] attempt to access beyond end of device [ 440.055193][T12545] loop5: rw=2049, want=131, limit=63 [ 440.061219][T12545] attempt to access beyond end of device [ 440.066950][T12545] loop5: rw=2049, want=132, limit=63 [ 440.085745][T12545] attempt to access beyond end of device [ 440.094221][T12545] loop5: rw=2049, want=133, limit=63 [ 440.100318][T12545] attempt to access beyond end of device [ 440.106122][T12545] loop5: rw=2049, want=142, limit=63 [ 440.114300][T12545] attempt to access beyond end of device [ 440.120213][T12545] loop5: rw=2049, want=143, limit=63 [ 440.125511][T12545] attempt to access beyond end of device [ 440.131556][T12545] loop5: rw=2049, want=144, limit=63 [ 440.136882][T12545] attempt to access beyond end of device [ 440.142552][T12545] loop5: rw=2049, want=145, limit=63 [ 440.147878][T12545] attempt to access beyond end of device [ 440.153573][T12545] loop5: rw=2049, want=153, limit=63 [ 440.159277][T12550] attempt to access beyond end of device [ 440.164905][T12550] loop5: rw=2049, want=78, limit=63 [ 440.170166][T12550] attempt to access beyond end of device [ 440.175830][T12550] loop5: rw=2049, want=79, limit=63 [ 440.181122][T12550] attempt to access beyond end of device [ 440.186755][T12550] loop5: rw=2049, want=80, limit=63 [ 440.191969][T12550] attempt to access beyond end of device [ 440.197591][T12550] loop5: rw=2049, want=81, limit=63 17:45:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:30 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:30 executing program 4: 17:45:30 executing program 2: 17:45:30 executing program 0: 17:45:30 executing program 3: [ 440.329173][T12567] overlayfs: missing 'lowerdir' 17:45:30 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:30 executing program 0: 17:45:30 executing program 4: 17:45:30 executing program 2: 17:45:30 executing program 3: [ 440.617845][T12576] overlayfs: missing 'lowerdir' 17:45:30 executing program 4: [ 440.721281][T12578] attempt to access beyond end of device [ 440.768828][T12578] loop5: rw=2049, want=78, limit=63 [ 440.818703][T12578] attempt to access beyond end of device [ 440.837783][T12578] loop5: rw=2049, want=79, limit=63 [ 440.861196][T12578] attempt to access beyond end of device [ 440.866910][T12578] loop5: rw=2049, want=80, limit=63 [ 440.872207][T12578] attempt to access beyond end of device [ 440.877895][T12578] loop5: rw=2049, want=81, limit=63 [ 440.892370][T12578] attempt to access beyond end of device [ 440.898024][T12578] loop5: rw=2049, want=130, limit=63 [ 440.903492][T12578] attempt to access beyond end of device [ 440.909390][T12578] loop5: rw=2049, want=131, limit=63 [ 440.914690][T12578] attempt to access beyond end of device [ 440.920411][T12578] loop5: rw=2049, want=132, limit=63 [ 440.926074][T12578] attempt to access beyond end of device [ 440.932701][T12578] loop5: rw=2049, want=133, limit=63 [ 440.937989][T12578] attempt to access beyond end of device [ 440.943717][T12578] loop5: rw=2049, want=142, limit=63 [ 440.949041][T12578] attempt to access beyond end of device [ 440.954840][T12578] loop5: rw=2049, want=143, limit=63 [ 440.960233][T12578] attempt to access beyond end of device [ 440.965899][T12578] loop5: rw=2049, want=144, limit=63 [ 440.971207][T12578] attempt to access beyond end of device [ 440.976915][T12578] loop5: rw=2049, want=145, limit=63 [ 440.982240][T12578] attempt to access beyond end of device [ 440.987939][T12578] loop5: rw=2049, want=153, limit=63 [ 440.993687][T12587] attempt to access beyond end of device [ 440.999425][T12587] loop5: rw=2049, want=78, limit=63 [ 441.004614][T12587] attempt to access beyond end of device [ 441.010680][T12587] loop5: rw=2049, want=79, limit=63 [ 441.015906][T12587] attempt to access beyond end of device [ 441.021649][T12587] loop5: rw=2049, want=80, limit=63 [ 441.026841][T12587] attempt to access beyond end of device [ 441.032510][T12587] loop5: rw=2049, want=81, limit=63 17:45:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:30 executing program 0: 17:45:30 executing program 2: 17:45:30 executing program 4: 17:45:30 executing program 3: 17:45:30 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:31 executing program 2: 17:45:31 executing program 0: [ 441.213478][T12600] overlayfs: unrecognized mount option "" or missing value 17:45:31 executing program 3: 17:45:31 executing program 4: [ 441.441028][T12610] attempt to access beyond end of device [ 441.446763][T12610] loop5: rw=2049, want=78, limit=63 [ 441.452420][T12610] attempt to access beyond end of device [ 441.458109][T12610] loop5: rw=2049, want=79, limit=63 [ 441.463618][T12610] attempt to access beyond end of device [ 441.469511][T12610] loop5: rw=2049, want=80, limit=63 [ 441.474816][T12610] attempt to access beyond end of device [ 441.480766][T12610] loop5: rw=2049, want=81, limit=63 17:45:31 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:31 executing program 4: [ 441.486325][T12610] attempt to access beyond end of device [ 441.493119][T12610] loop5: rw=2049, want=130, limit=63 [ 441.498470][T12610] attempt to access beyond end of device [ 441.504461][T12610] loop5: rw=2049, want=131, limit=63 [ 441.509978][T12610] attempt to access beyond end of device [ 441.515732][T12610] loop5: rw=2049, want=132, limit=63 [ 441.521356][T12610] attempt to access beyond end of device [ 441.538162][T12610] loop5: rw=2049, want=133, limit=63 [ 441.544110][T12610] attempt to access beyond end of device [ 441.552258][T12610] loop5: rw=2049, want=142, limit=63 [ 441.568898][T12610] attempt to access beyond end of device [ 441.574590][T12610] loop5: rw=2049, want=143, limit=63 [ 441.580253][T12610] attempt to access beyond end of device [ 441.585922][T12610] loop5: rw=2049, want=144, limit=63 [ 441.643369][T12610] attempt to access beyond end of device [ 441.683595][T12620] overlayfs: unrecognized mount option "" or missing value [ 441.692030][T12610] loop5: rw=2049, want=145, limit=63 [ 441.715831][T12610] attempt to access beyond end of device [ 441.736869][T12610] loop5: rw=2049, want=153, limit=63 [ 441.745607][T12615] attempt to access beyond end of device [ 441.751380][T12615] loop5: rw=2049, want=78, limit=63 [ 441.774308][T12615] attempt to access beyond end of device [ 441.788632][T12615] loop5: rw=2049, want=79, limit=63 [ 441.793909][T12615] attempt to access beyond end of device [ 441.803186][T12615] loop5: rw=2049, want=80, limit=63 [ 441.809353][T12615] attempt to access beyond end of device [ 441.815001][T12615] loop5: rw=2049, want=81, limit=63 [ 441.822967][T12615] attempt to access beyond end of device [ 441.830447][T12615] loop5: rw=2049, want=130, limit=63 [ 441.835808][T12615] attempt to access beyond end of device [ 441.844182][T12615] loop5: rw=2049, want=131, limit=63 [ 441.849892][T12615] attempt to access beyond end of device [ 441.855545][T12615] loop5: rw=2049, want=132, limit=63 [ 441.863012][T12615] attempt to access beyond end of device [ 441.868692][T12615] loop5: rw=2049, want=133, limit=63 [ 441.873989][T12615] attempt to access beyond end of device [ 441.879697][T12615] loop5: rw=2049, want=142, limit=63 [ 441.884977][T12615] attempt to access beyond end of device [ 441.890664][T12615] loop5: rw=2049, want=143, limit=63 [ 441.895985][T12615] attempt to access beyond end of device [ 441.901635][T12615] loop5: rw=2049, want=144, limit=63 [ 441.906925][T12615] attempt to access beyond end of device [ 441.913448][T12615] loop5: rw=2049, want=145, limit=63 17:45:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:31 executing program 2: 17:45:31 executing program 3: 17:45:31 executing program 0: 17:45:31 executing program 4: 17:45:31 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:31 executing program 2: [ 442.068003][T12632] overlayfs: unrecognized mount option "" or missing value 17:45:31 executing program 4: 17:45:31 executing program 0: 17:45:31 executing program 3: 17:45:32 executing program 4: 17:45:32 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 442.445080][T12653] overlayfs: unrecognized mount option "" or missing value [ 442.453216][T12644] attempt to access beyond end of device [ 442.459046][T12644] loop5: rw=2049, want=78, limit=63 [ 442.466539][T12644] attempt to access beyond end of device [ 442.481784][T12644] loop5: rw=2049, want=79, limit=63 [ 442.499035][T12644] attempt to access beyond end of device [ 442.511428][T12644] loop5: rw=2049, want=80, limit=63 [ 442.524863][T12644] attempt to access beyond end of device [ 442.534742][T12644] loop5: rw=2049, want=81, limit=63 [ 442.558768][T12644] attempt to access beyond end of device [ 442.591655][T12644] loop5: rw=2049, want=130, limit=63 [ 442.600869][T12644] attempt to access beyond end of device [ 442.622336][T12644] loop5: rw=2049, want=131, limit=63 [ 442.627706][T12644] attempt to access beyond end of device [ 442.641356][T12644] loop5: rw=2049, want=132, limit=63 [ 442.646888][T12644] attempt to access beyond end of device [ 442.652802][T12644] loop5: rw=2049, want=133, limit=63 [ 442.658182][T12644] attempt to access beyond end of device [ 442.664305][T12644] loop5: rw=2049, want=142, limit=63 [ 442.670355][T12644] attempt to access beyond end of device [ 442.676048][T12644] loop5: rw=2049, want=143, limit=63 [ 442.681669][T12644] attempt to access beyond end of device [ 442.687370][T12644] loop5: rw=2049, want=144, limit=63 [ 442.692975][T12644] attempt to access beyond end of device [ 442.699007][T12644] loop5: rw=2049, want=145, limit=63 [ 442.704348][T12644] attempt to access beyond end of device [ 442.710074][T12644] loop5: rw=2049, want=153, limit=63 [ 442.715629][T12651] attempt to access beyond end of device [ 442.721325][T12651] loop5: rw=2049, want=78, limit=63 [ 442.726731][T12651] attempt to access beyond end of device [ 442.732464][T12651] loop5: rw=2049, want=79, limit=63 [ 442.737664][T12651] attempt to access beyond end of device [ 442.743464][T12651] loop5: rw=2049, want=80, limit=63 [ 442.748709][T12651] attempt to access beyond end of device [ 442.754324][T12651] loop5: rw=2049, want=81, limit=63 17:45:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:32 executing program 3: 17:45:32 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:32 executing program 2: 17:45:32 executing program 4: 17:45:32 executing program 0: 17:45:32 executing program 3: 17:45:32 executing program 0: [ 442.942727][T12664] overlayfs: unrecognized mount option "" or missing value 17:45:32 executing program 4: 17:45:32 executing program 2: 17:45:32 executing program 3: 17:45:32 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 443.217757][T12670] attempt to access beyond end of device [ 443.218581][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 443.218667][ T27] audit: type=1804 audit(1581788733.004:163): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/126/bus" dev="sda1" ino=16609 res=1 [ 443.223503][T12670] loop5: rw=2049, want=78, limit=63 [ 443.268631][T12670] buffer_io_error: 90 callbacks suppressed [ 443.268686][T12670] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 443.368598][T12670] attempt to access beyond end of device [ 443.374356][T12670] loop5: rw=2049, want=79, limit=63 [ 443.408675][T12670] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 443.434744][T12686] overlayfs: unrecognized mount option "" or missing value [ 443.440216][T12670] attempt to access beyond end of device [ 443.472807][T12670] loop5: rw=2049, want=80, limit=63 [ 443.487464][T12670] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 443.499748][T12670] attempt to access beyond end of device [ 443.506733][T12670] loop5: rw=2049, want=81, limit=63 [ 443.513233][T12670] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 443.522134][T12670] attempt to access beyond end of device [ 443.527944][T12670] loop5: rw=2049, want=130, limit=63 [ 443.533677][T12670] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 443.542531][T12670] attempt to access beyond end of device [ 443.548204][T12670] loop5: rw=2049, want=131, limit=63 [ 443.554088][T12670] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 443.563209][T12670] attempt to access beyond end of device [ 443.570319][T12670] loop5: rw=2049, want=132, limit=63 [ 443.575781][T12670] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 443.584529][T12670] attempt to access beyond end of device [ 443.590261][T12670] loop5: rw=2049, want=133, limit=63 [ 443.595538][T12670] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 443.604095][T12670] attempt to access beyond end of device [ 443.609868][T12670] loop5: rw=2049, want=142, limit=63 [ 443.615207][T12670] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 443.624428][T12670] attempt to access beyond end of device [ 443.630090][T12670] loop5: rw=2049, want=143, limit=63 [ 443.635376][T12670] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 443.643886][T12670] attempt to access beyond end of device [ 443.649649][T12670] loop5: rw=2049, want=144, limit=63 [ 443.654950][T12670] attempt to access beyond end of device [ 443.660968][T12670] loop5: rw=2049, want=145, limit=63 [ 443.666321][T12670] attempt to access beyond end of device [ 443.671985][T12670] loop5: rw=2049, want=153, limit=63 [ 443.677578][T12680] attempt to access beyond end of device [ 443.683298][T12680] loop5: rw=2049, want=78, limit=63 [ 443.689862][T12680] attempt to access beyond end of device [ 443.695547][T12680] loop5: rw=2049, want=79, limit=63 [ 443.700907][T12680] attempt to access beyond end of device [ 443.706532][T12680] loop5: rw=2049, want=80, limit=63 [ 443.711765][T12680] attempt to access beyond end of device [ 443.717389][T12680] loop5: rw=2049, want=81, limit=63 17:45:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:33 executing program 4: 17:45:33 executing program 0: 17:45:33 executing program 2: 17:45:33 executing program 3: 17:45:33 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:33 executing program 0: 17:45:33 executing program 3: 17:45:33 executing program 4: 17:45:33 executing program 2: [ 443.900451][T12695] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 17:45:33 executing program 3: [ 443.970577][T12695] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 17:45:33 executing program 0: [ 444.152649][ T27] audit: type=1804 audit(1581788733.954:164): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/127/bus" dev="sda1" ino=17040 res=1 [ 444.194990][T12703] attempt to access beyond end of device [ 444.278902][T12703] loop5: rw=2049, want=78, limit=63 [ 444.318737][T12703] attempt to access beyond end of device [ 444.352817][T12703] loop5: rw=2049, want=79, limit=63 [ 444.368875][T12703] attempt to access beyond end of device [ 444.386692][T12703] loop5: rw=2049, want=80, limit=63 [ 444.392117][T12703] attempt to access beyond end of device [ 444.397782][T12703] loop5: rw=2049, want=81, limit=63 [ 444.403626][T12703] attempt to access beyond end of device [ 444.411775][T12703] loop5: rw=2049, want=130, limit=63 [ 444.424449][T12703] attempt to access beyond end of device [ 444.430155][T12703] loop5: rw=2049, want=131, limit=63 [ 444.442589][T12703] attempt to access beyond end of device [ 444.448237][T12703] loop5: rw=2049, want=132, limit=63 [ 444.453683][T12703] attempt to access beyond end of device [ 444.459326][T12703] loop5: rw=2049, want=133, limit=63 [ 444.464684][T12703] attempt to access beyond end of device [ 444.470337][T12703] loop5: rw=2049, want=142, limit=63 [ 444.475727][T12703] attempt to access beyond end of device [ 444.481413][T12703] loop5: rw=2049, want=143, limit=63 [ 444.486702][T12703] attempt to access beyond end of device [ 444.492353][T12703] loop5: rw=2049, want=144, limit=63 [ 444.497637][T12703] attempt to access beyond end of device [ 444.503281][T12703] loop5: rw=2049, want=145, limit=63 [ 444.508852][T12703] attempt to access beyond end of device [ 444.514471][T12703] loop5: rw=2049, want=153, limit=63 [ 444.520249][T12715] attempt to access beyond end of device [ 444.525965][T12715] loop5: rw=2049, want=78, limit=63 [ 444.531313][T12715] attempt to access beyond end of device [ 444.536943][T12715] loop5: rw=2049, want=79, limit=63 [ 444.542271][T12715] attempt to access beyond end of device [ 444.547900][T12715] loop5: rw=2049, want=80, limit=63 [ 444.553867][T12715] attempt to access beyond end of device [ 444.559581][T12715] loop5: rw=2049, want=81, limit=63 [ 444.564796][T12715] attempt to access beyond end of device [ 444.570460][T12715] loop5: rw=2049, want=130, limit=63 [ 444.575739][T12715] attempt to access beyond end of device [ 444.581738][T12715] loop5: rw=2049, want=131, limit=63 [ 444.587025][T12715] attempt to access beyond end of device [ 444.592733][T12715] loop5: rw=2049, want=132, limit=63 [ 444.598034][T12715] attempt to access beyond end of device [ 444.603725][T12715] loop5: rw=2049, want=133, limit=63 [ 444.609929][T12715] attempt to access beyond end of device [ 444.615558][T12715] loop5: rw=2049, want=142, limit=63 [ 444.620885][T12715] attempt to access beyond end of device [ 444.626523][T12715] loop5: rw=2049, want=143, limit=63 [ 444.632293][T12715] attempt to access beyond end of device [ 444.637920][T12715] loop5: rw=2049, want=144, limit=63 [ 444.643221][T12715] attempt to access beyond end of device [ 444.648884][T12715] loop5: rw=2049, want=145, limit=63 17:45:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:34 executing program 4: 17:45:34 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:34 executing program 2: 17:45:34 executing program 0: 17:45:34 executing program 3: 17:45:34 executing program 4: 17:45:34 executing program 3: 17:45:34 executing program 0: [ 444.848781][T12726] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 444.875703][T12726] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 17:45:34 executing program 2: 17:45:34 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 445.008009][ T27] audit: type=1804 audit(1581788734.804:165): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/128/bus" dev="sda1" ino=16738 res=1 17:45:34 executing program 0: [ 445.158496][T12729] attempt to access beyond end of device [ 445.192131][T12729] loop5: rw=2049, want=78, limit=63 [ 445.206030][T12745] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 445.217881][ T27] audit: type=1804 audit(1581788734.884:166): pid=12729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/128/bus" dev="sda1" ino=16738 res=1 [ 445.233247][T12729] attempt to access beyond end of device [ 445.251532][T12745] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 445.275562][T12729] loop5: rw=2049, want=79, limit=63 [ 445.288625][T12729] attempt to access beyond end of device [ 445.333460][T12729] loop5: rw=2049, want=80, limit=63 [ 445.356365][T12729] attempt to access beyond end of device [ 445.367239][T12729] loop5: rw=2049, want=81, limit=63 [ 445.372855][T12729] attempt to access beyond end of device [ 445.396592][T12729] loop5: rw=2049, want=130, limit=63 [ 445.402029][T12729] attempt to access beyond end of device [ 445.407699][T12729] loop5: rw=2049, want=131, limit=63 [ 445.424578][T12729] attempt to access beyond end of device [ 445.430632][T12729] loop5: rw=2049, want=132, limit=63 [ 445.435996][T12729] attempt to access beyond end of device [ 445.441997][T12729] loop5: rw=2049, want=133, limit=63 [ 445.447390][T12729] attempt to access beyond end of device [ 445.453363][T12729] loop5: rw=2049, want=142, limit=63 [ 445.458963][T12729] attempt to access beyond end of device [ 445.464621][T12729] loop5: rw=2049, want=143, limit=63 [ 445.470170][T12729] attempt to access beyond end of device [ 445.475797][T12729] loop5: rw=2049, want=144, limit=63 [ 445.481142][T12729] attempt to access beyond end of device [ 445.486787][T12729] loop5: rw=2049, want=145, limit=63 [ 445.492168][T12729] attempt to access beyond end of device [ 445.497924][T12729] loop5: rw=2049, want=153, limit=63 [ 445.503604][T12738] attempt to access beyond end of device [ 445.510386][T12738] loop5: rw=2049, want=78, limit=63 [ 445.515652][T12738] attempt to access beyond end of device [ 445.521341][T12738] loop5: rw=2049, want=79, limit=63 [ 445.526612][T12738] attempt to access beyond end of device [ 445.532297][T12738] loop5: rw=2049, want=80, limit=63 [ 445.537494][T12738] attempt to access beyond end of device [ 445.543456][T12738] loop5: rw=2049, want=81, limit=63 17:45:35 executing program 3: 17:45:35 executing program 4: 17:45:35 executing program 2: 17:45:35 executing program 0: 17:45:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:35 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:35 executing program 2: 17:45:35 executing program 4: 17:45:35 executing program 3: 17:45:35 executing program 0: [ 445.734940][T12758] overlayfs: unrecognized mount option "upper" or missing value 17:45:35 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:35 executing program 3: [ 445.974865][ T27] audit: type=1804 audit(1581788735.774:167): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/129/bus" dev="sda1" ino=17050 res=1 17:45:35 executing program 4: 17:45:35 executing program 2: 17:45:35 executing program 0: [ 446.076233][T12773] overlayfs: unrecognized mount option "upper" or missing value [ 446.102763][T12765] attempt to access beyond end of device [ 446.108437][T12765] loop5: rw=2049, want=78, limit=63 17:45:35 executing program 3: [ 446.199551][T12765] attempt to access beyond end of device [ 446.205355][T12765] loop5: rw=2049, want=79, limit=63 [ 446.282479][T12765] attempt to access beyond end of device [ 446.288173][T12765] loop5: rw=2049, want=80, limit=63 [ 446.368309][T12765] attempt to access beyond end of device [ 446.398349][T12765] loop5: rw=2049, want=81, limit=63 [ 446.420677][T12765] attempt to access beyond end of device [ 446.438163][T12765] loop5: rw=2049, want=130, limit=63 [ 446.443705][T12765] attempt to access beyond end of device [ 446.449509][T12765] loop5: rw=2049, want=131, limit=63 [ 446.463740][T12765] attempt to access beyond end of device [ 446.469738][T12765] loop5: rw=2049, want=132, limit=63 [ 446.477650][T12765] attempt to access beyond end of device [ 446.483644][T12765] loop5: rw=2049, want=133, limit=63 [ 446.489240][T12765] attempt to access beyond end of device [ 446.501466][T12765] loop5: rw=2049, want=142, limit=63 [ 446.506762][T12765] attempt to access beyond end of device [ 446.512434][T12765] loop5: rw=2049, want=143, limit=63 [ 446.517715][T12765] attempt to access beyond end of device [ 446.523389][T12765] loop5: rw=2049, want=144, limit=63 [ 446.528731][T12765] attempt to access beyond end of device [ 446.534358][T12765] loop5: rw=2049, want=145, limit=63 [ 446.539723][T12765] attempt to access beyond end of device [ 446.545351][T12765] loop5: rw=2049, want=153, limit=63 [ 446.551052][T12775] attempt to access beyond end of device [ 446.556802][T12775] loop5: rw=2049, want=78, limit=63 [ 446.562250][T12775] attempt to access beyond end of device [ 446.567917][T12775] loop5: rw=2049, want=79, limit=63 [ 446.573227][T12775] attempt to access beyond end of device [ 446.578919][T12775] loop5: rw=2049, want=80, limit=63 [ 446.584156][T12775] attempt to access beyond end of device [ 446.589832][T12775] loop5: rw=2049, want=81, limit=63 17:45:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ftruncate(0xffffffffffffffff, 0x8200) fchdir(r0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:36 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:36 executing program 0: 17:45:36 executing program 4: 17:45:36 executing program 3: 17:45:36 executing program 2: 17:45:36 executing program 2: 17:45:36 executing program 3: [ 446.759701][T12796] overlayfs: unrecognized mount option "upper" or missing value 17:45:36 executing program 4: 17:45:36 executing program 0: 17:45:36 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 446.961863][ T27] audit: type=1804 audit(1581788736.764:168): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/130/bus" dev="sda1" ino=16946 res=1 [ 446.994292][T12806] attempt to access beyond end of device 17:45:36 executing program 4: [ 447.008673][T12806] loop5: rw=2049, want=78, limit=63 [ 447.013934][T12806] attempt to access beyond end of device [ 447.028632][T12806] loop5: rw=2049, want=79, limit=63 [ 447.033873][T12806] attempt to access beyond end of device [ 447.148581][T12806] loop5: rw=2049, want=80, limit=63 [ 447.231427][T12806] attempt to access beyond end of device [ 447.235993][T12818] overlayfs: workdir and upperdir must be separate subtrees [ 447.237127][T12806] loop5: rw=2049, want=81, limit=63 [ 447.237213][T12806] attempt to access beyond end of device [ 447.276791][T12806] loop5: rw=2049, want=130, limit=63 [ 447.285763][T12806] attempt to access beyond end of device [ 447.308343][T12806] loop5: rw=2049, want=131, limit=63 [ 447.317691][T12806] attempt to access beyond end of device [ 447.323420][T12806] loop5: rw=2049, want=132, limit=63 [ 447.329124][T12806] attempt to access beyond end of device [ 447.334802][T12806] loop5: rw=2049, want=133, limit=63 [ 447.340191][T12806] attempt to access beyond end of device [ 447.345876][T12806] loop5: rw=2049, want=142, limit=63 [ 447.351344][T12806] attempt to access beyond end of device [ 447.357054][T12806] loop5: rw=2049, want=143, limit=63 [ 447.362479][T12806] attempt to access beyond end of device [ 447.368172][T12806] loop5: rw=2049, want=144, limit=63 [ 447.373573][T12806] attempt to access beyond end of device [ 447.379282][T12806] loop5: rw=2049, want=145, limit=63 [ 447.384771][T12806] attempt to access beyond end of device [ 447.390504][T12806] loop5: rw=2049, want=153, limit=63 [ 447.397541][T12809] attempt to access beyond end of device [ 447.403239][T12809] loop5: rw=2049, want=78, limit=63 [ 447.408599][T12809] attempt to access beyond end of device [ 447.414425][T12809] loop5: rw=2049, want=79, limit=63 [ 447.419651][T12809] attempt to access beyond end of device [ 447.425282][T12809] loop5: rw=2049, want=80, limit=63 [ 447.430535][T12809] attempt to access beyond end of device [ 447.436157][T12809] loop5: rw=2049, want=81, limit=63 [ 447.441415][T12809] attempt to access beyond end of device [ 447.447106][T12809] loop5: rw=2049, want=130, limit=63 [ 447.452476][T12809] attempt to access beyond end of device [ 447.458217][T12809] loop5: rw=2049, want=131, limit=63 [ 447.463595][T12809] attempt to access beyond end of device [ 447.469252][T12809] loop5: rw=2049, want=132, limit=63 [ 447.474534][T12809] attempt to access beyond end of device [ 447.480204][T12809] loop5: rw=2049, want=133, limit=63 [ 447.485586][T12809] attempt to access beyond end of device [ 447.491399][T12809] loop5: rw=2049, want=142, limit=63 [ 447.496706][T12809] attempt to access beyond end of device [ 447.502380][T12809] loop5: rw=2049, want=143, limit=63 [ 447.507723][T12809] attempt to access beyond end of device [ 447.513403][T12809] loop5: rw=2049, want=144, limit=63 [ 447.518764][T12809] attempt to access beyond end of device [ 447.524387][T12809] loop5: rw=2049, want=145, limit=63 17:45:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ftruncate(0xffffffffffffffff, 0x8200) fchdir(r0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:37 executing program 3: 17:45:37 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:37 executing program 0: 17:45:37 executing program 4: 17:45:37 executing program 2: 17:45:37 executing program 4: 17:45:37 executing program 3: 17:45:37 executing program 0: [ 447.695516][T12828] overlayfs: workdir and upperdir must be separate subtrees 17:45:37 executing program 2: 17:45:37 executing program 4: 17:45:37 executing program 0: [ 447.905664][ T27] audit: type=1804 audit(1581788737.704:169): pid=12832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/131/bus" dev="sda1" ino=17065 res=1 [ 448.003401][T12832] attempt to access beyond end of device [ 448.104267][T12832] loop5: rw=2049, want=78, limit=63 [ 448.148652][T12832] attempt to access beyond end of device [ 448.198582][T12832] loop5: rw=2049, want=79, limit=63 [ 448.203928][T12832] attempt to access beyond end of device [ 448.230089][T12832] loop5: rw=2049, want=80, limit=63 [ 448.235341][T12832] attempt to access beyond end of device [ 448.242602][T12832] loop5: rw=2049, want=81, limit=63 [ 448.247974][T12832] attempt to access beyond end of device [ 448.253887][T12832] loop5: rw=2049, want=130, limit=63 [ 448.259295][T12832] attempt to access beyond end of device [ 448.264920][T12832] loop5: rw=2049, want=131, limit=63 [ 448.270233][T12832] attempt to access beyond end of device [ 448.275855][T12832] loop5: rw=2049, want=132, limit=63 [ 448.281167][T12832] buffer_io_error: 92 callbacks suppressed [ 448.281178][T12832] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 448.295531][T12832] attempt to access beyond end of device [ 448.301281][T12832] loop5: rw=2049, want=133, limit=63 [ 448.306567][T12832] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 448.315116][T12832] attempt to access beyond end of device [ 448.320796][T12832] loop5: rw=2049, want=142, limit=63 [ 448.326065][T12832] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 448.334583][T12832] attempt to access beyond end of device [ 448.340244][T12832] loop5: rw=2049, want=143, limit=63 [ 448.345522][T12832] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 448.354045][T12832] attempt to access beyond end of device [ 448.359723][T12832] loop5: rw=2049, want=144, limit=63 [ 448.365072][T12832] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 448.373760][T12832] attempt to access beyond end of device [ 448.379423][T12832] loop5: rw=2049, want=145, limit=63 [ 448.384730][T12832] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 448.393306][T12832] attempt to access beyond end of device [ 448.398962][T12832] loop5: rw=2049, want=153, limit=63 [ 448.405109][T12847] attempt to access beyond end of device [ 448.412294][T12847] loop5: rw=2049, want=78, limit=63 [ 448.417512][T12847] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 448.425981][T12847] attempt to access beyond end of device [ 448.431673][T12847] loop5: rw=2049, want=79, limit=63 [ 448.436852][T12847] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 448.445295][T12847] attempt to access beyond end of device [ 448.451164][T12847] loop5: rw=2049, want=80, limit=63 [ 448.456360][T12847] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 448.464807][T12847] attempt to access beyond end of device [ 448.470571][T12847] loop5: rw=2049, want=81, limit=63 [ 448.475749][T12847] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 448.484326][T12847] attempt to access beyond end of device [ 448.489994][T12847] loop5: rw=2049, want=130, limit=63 [ 448.495312][T12847] attempt to access beyond end of device [ 448.500978][T12847] loop5: rw=2049, want=131, limit=63 [ 448.506288][T12847] attempt to access beyond end of device [ 448.511946][T12847] loop5: rw=2049, want=132, limit=63 [ 448.517247][T12847] attempt to access beyond end of device [ 448.522982][T12847] loop5: rw=2049, want=133, limit=63 [ 448.528270][T12847] attempt to access beyond end of device [ 448.533948][T12847] loop5: rw=2049, want=142, limit=63 [ 448.539264][T12847] attempt to access beyond end of device [ 448.544880][T12847] loop5: rw=2049, want=143, limit=63 [ 448.550180][T12847] attempt to access beyond end of device [ 448.555805][T12847] loop5: rw=2049, want=144, limit=63 [ 448.561155][T12847] attempt to access beyond end of device [ 448.566955][T12847] loop5: rw=2049, want=145, limit=63 [ 448.572298][T12847] attempt to access beyond end of device [ 448.577966][T12847] loop5: rw=2049, want=153, limit=63 17:45:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ftruncate(0xffffffffffffffff, 0x8200) fchdir(r0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:38 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:38 executing program 4: 17:45:38 executing program 2: 17:45:38 executing program 0: 17:45:38 executing program 3: 17:45:38 executing program 4: [ 448.764874][T12858] overlayfs: workdir and upperdir must be separate subtrees 17:45:38 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:38 executing program 0: 17:45:38 executing program 3: 17:45:38 executing program 2: 17:45:38 executing program 3: [ 449.059342][ T27] audit: type=1804 audit(1581788738.864:170): pid=12864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/132/bus" dev="sda1" ino=17080 res=1 [ 449.141917][T12864] attempt to access beyond end of device [ 449.178550][T12864] loop5: rw=2049, want=78, limit=63 [ 449.207487][T12875] overlayfs: failed to resolve './fil': -2 [ 449.227713][T12864] attempt to access beyond end of device [ 449.298587][T12864] loop5: rw=2049, want=79, limit=63 [ 449.303957][T12864] attempt to access beyond end of device [ 449.313539][T12864] loop5: rw=2049, want=80, limit=63 [ 449.318904][T12864] attempt to access beyond end of device [ 449.324719][T12864] loop5: rw=2049, want=81, limit=63 [ 449.330602][T12864] attempt to access beyond end of device [ 449.336412][T12864] loop5: rw=2049, want=130, limit=63 [ 449.341806][T12864] attempt to access beyond end of device [ 449.347535][T12864] loop5: rw=2049, want=131, limit=63 [ 449.352949][T12864] attempt to access beyond end of device [ 449.358695][T12864] loop5: rw=2049, want=132, limit=63 [ 449.364066][T12864] attempt to access beyond end of device [ 449.369736][T12864] loop5: rw=2049, want=133, limit=63 [ 449.375018][T12864] attempt to access beyond end of device [ 449.380725][T12864] loop5: rw=2049, want=142, limit=63 [ 449.386002][T12864] attempt to access beyond end of device [ 449.391655][T12864] loop5: rw=2049, want=143, limit=63 [ 449.397051][T12864] attempt to access beyond end of device [ 449.402708][T12864] loop5: rw=2049, want=144, limit=63 [ 449.407993][T12864] attempt to access beyond end of device [ 449.413685][T12864] loop5: rw=2049, want=145, limit=63 [ 449.419046][T12864] attempt to access beyond end of device [ 449.424750][T12864] loop5: rw=2049, want=153, limit=63 [ 449.430509][T12881] attempt to access beyond end of device [ 449.436140][T12881] loop5: rw=2049, want=78, limit=63 [ 449.441417][T12881] attempt to access beyond end of device [ 449.447045][T12881] loop5: rw=2049, want=79, limit=63 [ 449.452274][T12881] attempt to access beyond end of device [ 449.457924][T12881] loop5: rw=2049, want=80, limit=63 [ 449.463177][T12881] attempt to access beyond end of device [ 449.468870][T12881] loop5: rw=2049, want=81, limit=63 17:45:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:39 executing program 4: 17:45:39 executing program 2: 17:45:39 executing program 0: 17:45:39 executing program 3: 17:45:39 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:39 executing program 2: 17:45:39 executing program 4: [ 449.691396][T12891] overlayfs: failed to resolve './fil': -2 17:45:39 executing program 3: 17:45:39 executing program 0: 17:45:39 executing program 2: 17:45:39 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 450.010768][ T27] audit: type=1804 audit(1581788739.814:171): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/133/bus" dev="sda1" ino=17080 res=1 [ 450.081688][T12900] attempt to access beyond end of device [ 450.118612][T12900] loop5: rw=2049, want=78, limit=63 [ 450.123987][T12900] attempt to access beyond end of device [ 450.148347][T12912] overlayfs: failed to resolve './fil': -2 [ 450.154764][T12900] loop5: rw=2049, want=79, limit=63 [ 450.163536][T12900] attempt to access beyond end of device [ 450.176228][T12900] loop5: rw=2049, want=80, limit=63 [ 450.192768][T12900] attempt to access beyond end of device [ 450.198811][T12900] loop5: rw=2049, want=81, limit=63 [ 450.204193][T12900] attempt to access beyond end of device [ 450.211237][T12900] loop5: rw=2049, want=130, limit=63 [ 450.216609][T12900] attempt to access beyond end of device [ 450.225120][T12900] loop5: rw=2049, want=131, limit=63 [ 450.230705][T12900] attempt to access beyond end of device [ 450.236342][T12900] loop5: rw=2049, want=132, limit=63 [ 450.244216][T12900] attempt to access beyond end of device [ 450.250120][T12900] loop5: rw=2049, want=133, limit=63 [ 450.255450][T12900] attempt to access beyond end of device [ 450.261368][T12900] loop5: rw=2049, want=142, limit=63 [ 450.266664][T12900] attempt to access beyond end of device [ 450.272564][T12900] loop5: rw=2049, want=143, limit=63 [ 450.277872][T12900] attempt to access beyond end of device [ 450.283857][T12900] loop5: rw=2049, want=144, limit=63 [ 450.289234][T12900] attempt to access beyond end of device [ 450.294856][T12900] loop5: rw=2049, want=145, limit=63 [ 450.300214][T12900] attempt to access beyond end of device [ 450.305845][T12900] loop5: rw=2049, want=153, limit=63 [ 450.311569][T12910] attempt to access beyond end of device [ 450.317248][T12910] loop5: rw=2049, want=78, limit=63 [ 450.322768][T12910] attempt to access beyond end of device [ 450.328495][T12910] loop5: rw=2049, want=79, limit=63 [ 450.334909][T12910] attempt to access beyond end of device [ 450.340899][T12910] loop5: rw=2049, want=80, limit=63 [ 450.346097][T12910] attempt to access beyond end of device [ 450.351839][T12910] loop5: rw=2049, want=81, limit=63 17:45:40 executing program 2: 17:45:40 executing program 3: 17:45:40 executing program 0: 17:45:40 executing program 4: 17:45:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:40 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:40 executing program 0: 17:45:40 executing program 2: 17:45:40 executing program 4: 17:45:40 executing program 3: [ 450.554193][T12922] overlayfs: failed to resolve './file': -2 17:45:40 executing program 0: 17:45:40 executing program 2: [ 450.763529][ T27] audit: type=1804 audit(1581788740.564:172): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/134/bus" dev="sda1" ino=17098 res=1 [ 450.796888][T12934] attempt to access beyond end of device 17:45:40 executing program 0: 17:45:40 executing program 2: [ 450.828616][T12934] loop5: rw=2049, want=78, limit=63 [ 450.874546][T12934] attempt to access beyond end of device [ 450.952959][T12934] loop5: rw=2049, want=79, limit=63 17:45:40 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:40 executing program 2: [ 450.984625][T12934] attempt to access beyond end of device [ 451.003616][T12934] loop5: rw=2049, want=80, limit=63 [ 451.033003][T12934] attempt to access beyond end of device [ 451.114277][T12934] loop5: rw=2049, want=81, limit=63 [ 451.132555][T12934] attempt to access beyond end of device [ 451.171170][T12934] loop5: rw=2049, want=130, limit=63 [ 451.185249][T12951] overlayfs: failed to resolve './file': -2 [ 451.191525][T12934] attempt to access beyond end of device [ 451.197263][T12934] loop5: rw=2049, want=131, limit=63 [ 451.222605][T12934] attempt to access beyond end of device [ 451.233343][T12934] loop5: rw=2049, want=132, limit=63 [ 451.238805][T12934] attempt to access beyond end of device [ 451.244511][T12934] loop5: rw=2049, want=133, limit=63 [ 451.252901][T12934] attempt to access beyond end of device [ 451.258712][T12934] loop5: rw=2049, want=142, limit=63 [ 451.264224][T12934] attempt to access beyond end of device [ 451.272964][T12934] loop5: rw=2049, want=143, limit=63 [ 451.278323][T12934] attempt to access beyond end of device [ 451.284137][T12934] loop5: rw=2049, want=144, limit=63 [ 451.292179][T12934] attempt to access beyond end of device [ 451.297881][T12934] loop5: rw=2049, want=145, limit=63 [ 451.303421][T12934] attempt to access beyond end of device [ 451.312604][T12934] loop5: rw=2049, want=153, limit=63 [ 451.318359][T12938] attempt to access beyond end of device [ 451.324211][T12938] loop5: rw=2049, want=78, limit=63 [ 451.329963][T12938] attempt to access beyond end of device [ 451.335639][T12938] loop5: rw=2049, want=79, limit=63 [ 451.340982][T12938] attempt to access beyond end of device [ 451.346647][T12938] loop5: rw=2049, want=80, limit=63 [ 451.351928][T12938] attempt to access beyond end of device [ 451.357595][T12938] loop5: rw=2049, want=81, limit=63 [ 451.362883][T12938] attempt to access beyond end of device [ 451.368645][T12938] loop5: rw=2049, want=130, limit=63 [ 451.373958][T12938] attempt to access beyond end of device [ 451.379628][T12938] loop5: rw=2049, want=131, limit=63 [ 451.384980][T12938] attempt to access beyond end of device [ 451.390635][T12938] loop5: rw=2049, want=132, limit=63 [ 451.396509][T12938] attempt to access beyond end of device [ 451.402204][T12938] loop5: rw=2049, want=133, limit=63 [ 451.407502][T12938] attempt to access beyond end of device [ 451.413209][T12938] loop5: rw=2049, want=142, limit=63 [ 451.418566][T12938] attempt to access beyond end of device [ 451.424192][T12938] loop5: rw=2049, want=143, limit=63 [ 451.429626][T12938] attempt to access beyond end of device [ 451.435255][T12938] loop5: rw=2049, want=144, limit=63 [ 451.440612][T12938] attempt to access beyond end of device [ 451.446236][T12938] loop5: rw=2049, want=145, limit=63 [ 451.452438][T12938] attempt to access beyond end of device [ 451.458066][T12938] loop5: rw=2049, want=153, limit=63 17:45:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:41 executing program 4: 17:45:41 executing program 0: 17:45:41 executing program 3: 17:45:41 executing program 2: 17:45:41 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:41 executing program 4: [ 451.621273][T12962] overlayfs: failed to resolve './file': -2 17:45:41 executing program 2: 17:45:41 executing program 3: 17:45:41 executing program 0: 17:45:41 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:41 executing program 2: [ 451.884834][ T27] audit: type=1804 audit(1581788741.684:173): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/135/bus" dev="sda1" ino=17104 res=1 [ 451.982283][T12967] attempt to access beyond end of device [ 451.987963][T12967] loop5: rw=2049, want=78, limit=63 [ 452.120902][T12967] attempt to access beyond end of device [ 452.132194][T12967] loop5: rw=2049, want=79, limit=63 [ 452.147838][T12967] attempt to access beyond end of device [ 452.156425][T12967] loop5: rw=2049, want=80, limit=63 [ 452.171261][T12967] attempt to access beyond end of device [ 452.182718][T12967] loop5: rw=2049, want=81, limit=63 [ 452.188252][T12967] attempt to access beyond end of device [ 452.202870][T12967] loop5: rw=2049, want=130, limit=63 [ 452.208231][T12967] attempt to access beyond end of device [ 452.215762][T12967] loop5: rw=2049, want=131, limit=63 [ 452.224119][T12967] attempt to access beyond end of device [ 452.233732][T12967] loop5: rw=2049, want=132, limit=63 [ 452.242107][T12967] attempt to access beyond end of device [ 452.247870][T12967] loop5: rw=2049, want=133, limit=63 [ 452.253340][T12967] attempt to access beyond end of device [ 452.259057][T12967] loop5: rw=2049, want=142, limit=63 [ 452.264374][T12967] attempt to access beyond end of device [ 452.270095][T12967] loop5: rw=2049, want=143, limit=63 [ 452.275457][T12967] attempt to access beyond end of device [ 452.281121][T12967] loop5: rw=2049, want=144, limit=63 [ 452.286557][T12967] attempt to access beyond end of device [ 452.292215][T12967] loop5: rw=2049, want=145, limit=63 [ 452.297740][T12967] attempt to access beyond end of device [ 452.303439][T12967] loop5: rw=2049, want=153, limit=63 [ 452.309180][T12976] attempt to access beyond end of device [ 452.314840][T12976] loop5: rw=2049, want=78, limit=63 [ 452.320857][T12976] attempt to access beyond end of device [ 452.326481][T12976] loop5: rw=2049, want=79, limit=63 [ 452.331792][T12976] attempt to access beyond end of device [ 452.337422][T12976] loop5: rw=2049, want=80, limit=63 [ 452.342647][T12976] attempt to access beyond end of device [ 452.348296][T12976] loop5: rw=2049, want=81, limit=63 17:45:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ftruncate(r0, 0x8200) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:42 executing program 4: 17:45:42 executing program 0: 17:45:42 executing program 3: 17:45:42 executing program 2: 17:45:42 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:42 executing program 3: 17:45:42 executing program 0: 17:45:42 executing program 2: 17:45:42 executing program 4: [ 452.640217][ T27] audit: type=1804 audit(1581788742.444:174): pid=12996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/136/bus" dev="sda1" ino=16529 res=1 17:45:42 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:42 executing program 4: [ 452.744491][ T27] audit: type=1804 audit(1581788742.484:175): pid=12996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/136/bus" dev="sda1" ino=16529 res=1 17:45:42 executing program 2: 17:45:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ftruncate(r0, 0x8200) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) [ 452.898468][ T27] audit: type=1804 audit(1581788742.484:176): pid=12996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/136/bus" dev="sda1" ino=16529 res=1 17:45:42 executing program 4: 17:45:42 executing program 2: 17:45:42 executing program 3: 17:45:42 executing program 0: 17:45:42 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:43 executing program 2: 17:45:43 executing program 3: 17:45:43 executing program 0: 17:45:43 executing program 3: 17:45:43 executing program 2: 17:45:43 executing program 4: [ 453.315249][ T27] audit: type=1804 audit(1581788743.114:177): pid=13028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/137/bus" dev="sda1" ino=16594 res=1 [ 453.454671][ T27] audit: type=1804 audit(1581788743.184:178): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/137/bus" dev="sda1" ino=16594 res=1 [ 453.540545][ T27] audit: type=1804 audit(1581788743.204:179): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/137/bus" dev="sda1" ino=16594 res=1 17:45:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ftruncate(r0, 0x8200) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:43 executing program 3: 17:45:43 executing program 2: 17:45:43 executing program 4: 17:45:43 executing program 0: 17:45:43 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:43 executing program 3: 17:45:43 executing program 2: 17:45:43 executing program 0: 17:45:43 executing program 4: 17:45:43 executing program 3: 17:45:43 executing program 2: 17:45:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(0x0, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:43 executing program 0: 17:45:43 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:45:44 executing program 3: 17:45:44 executing program 4: 17:45:44 executing program 2: 17:45:44 executing program 0: 17:45:44 executing program 4: 17:45:44 executing program 3: [ 454.451025][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 454.451044][ T27] audit: type=1804 audit(1581788744.254:183): pid=13078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/139/bus" dev="sda1" ino=16787 res=1 17:45:44 executing program 0: 17:45:44 executing program 2: [ 454.534985][T13078] attempt to access beyond end of device 17:45:44 executing program 3: [ 454.620737][T13078] loop5: rw=2049, want=78, limit=63 [ 454.681126][T13078] buffer_io_error: 80 callbacks suppressed [ 454.681141][T13078] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 454.772702][T13078] attempt to access beyond end of device [ 454.798755][T13078] loop5: rw=2049, want=79, limit=63 [ 454.817394][T13078] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 454.839545][T13078] attempt to access beyond end of device [ 454.870978][T13078] loop5: rw=2049, want=80, limit=63 [ 454.888601][T13078] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 454.898860][T13078] attempt to access beyond end of device [ 454.904568][T13078] loop5: rw=2049, want=81, limit=63 [ 454.910997][T13078] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 454.921688][T13078] attempt to access beyond end of device [ 454.927365][T13078] loop5: rw=2049, want=130, limit=63 [ 454.932734][T13078] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 454.941337][T13078] attempt to access beyond end of device [ 454.946959][T13078] loop5: rw=2049, want=131, limit=63 [ 454.952314][T13078] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 454.961992][T13078] attempt to access beyond end of device [ 454.967722][T13078] loop5: rw=2049, want=132, limit=63 [ 454.973094][T13078] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 454.981646][T13078] attempt to access beyond end of device [ 454.987262][T13078] loop5: rw=2049, want=133, limit=63 [ 454.992568][T13078] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 455.001165][T13078] attempt to access beyond end of device [ 455.006781][T13078] loop5: rw=2049, want=142, limit=63 [ 455.012106][T13078] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 455.020633][T13078] attempt to access beyond end of device [ 455.026248][T13078] loop5: rw=2049, want=143, limit=63 [ 455.031593][T13078] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 455.040133][T13078] attempt to access beyond end of device [ 455.045783][T13078] loop5: rw=2049, want=144, limit=63 [ 455.051195][T13078] attempt to access beyond end of device [ 455.056820][T13078] loop5: rw=2049, want=145, limit=63 [ 455.062177][T13078] attempt to access beyond end of device [ 455.067923][T13078] loop5: rw=2049, want=153, limit=63 17:45:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(0x0, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:45 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r2) 17:45:45 executing program 4: 17:45:45 executing program 2: 17:45:45 executing program 0: 17:45:45 executing program 3: 17:45:45 executing program 3: 17:45:45 executing program 4: 17:45:45 executing program 2: 17:45:45 executing program 0: 17:45:45 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r2) [ 455.423060][ T27] audit: type=1804 audit(1581788745.224:184): pid=13114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/140/bus" dev="sda1" ino=16851 res=1 [ 455.462746][T13114] attempt to access beyond end of device 17:45:45 executing program 4: [ 455.475088][T13114] loop5: rw=2049, want=78, limit=63 [ 455.486035][T13114] attempt to access beyond end of device [ 455.492315][T13114] loop5: rw=2049, want=79, limit=63 [ 455.497715][T13114] attempt to access beyond end of device [ 455.503436][T13114] loop5: rw=2049, want=80, limit=63 [ 455.517239][T13114] attempt to access beyond end of device [ 455.526004][T13114] loop5: rw=2049, want=81, limit=63 [ 455.534728][T13114] attempt to access beyond end of device [ 455.543767][T13114] loop5: rw=2049, want=130, limit=63 [ 455.552458][T13114] attempt to access beyond end of device [ 455.578598][T13114] loop5: rw=2049, want=131, limit=63 [ 455.594322][T13114] attempt to access beyond end of device [ 455.621170][T13114] loop5: rw=2049, want=132, limit=63 [ 455.653027][T13114] attempt to access beyond end of device [ 455.669683][T13114] loop5: rw=2049, want=133, limit=63 [ 455.681713][T13114] attempt to access beyond end of device [ 455.730401][T13114] loop5: rw=2049, want=142, limit=63 [ 455.735727][T13114] attempt to access beyond end of device [ 455.758668][T13114] loop5: rw=2049, want=143, limit=63 [ 455.764076][T13114] attempt to access beyond end of device [ 455.807874][T13114] loop5: rw=2049, want=144, limit=63 [ 455.813991][T13114] attempt to access beyond end of device [ 455.820464][T13114] loop5: rw=2049, want=145, limit=63 [ 455.825909][T13114] attempt to access beyond end of device [ 455.831877][T13114] loop5: rw=2049, want=153, limit=63 17:45:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(0x0, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:45 executing program 3: 17:45:45 executing program 0: 17:45:45 executing program 2: 17:45:45 executing program 4: 17:45:45 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(r2) 17:45:45 executing program 3: 17:45:45 executing program 0: 17:45:45 executing program 2: 17:45:45 executing program 4: [ 456.160193][ T27] audit: type=1804 audit(1581788745.964:185): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/141/bus" dev="sda1" ino=16532 res=1 [ 456.181388][T13143] attempt to access beyond end of device [ 456.190687][T13143] loop5: rw=2049, want=78, limit=63 [ 456.195980][T13143] attempt to access beyond end of device [ 456.202198][T13143] loop5: rw=2049, want=79, limit=63 [ 456.207482][T13143] attempt to access beyond end of device [ 456.213594][T13143] loop5: rw=2049, want=80, limit=63 [ 456.222170][T13143] attempt to access beyond end of device [ 456.234782][T13143] loop5: rw=2049, want=81, limit=63 [ 456.243967][T13143] attempt to access beyond end of device [ 456.249966][T13143] loop5: rw=2049, want=130, limit=63 17:45:46 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) [ 456.255403][T13143] attempt to access beyond end of device [ 456.261470][T13143] loop5: rw=2049, want=131, limit=63 [ 456.266897][T13143] attempt to access beyond end of device [ 456.273030][T13143] loop5: rw=2049, want=132, limit=63 [ 456.278428][T13143] attempt to access beyond end of device [ 456.295804][T13143] loop5: rw=2049, want=133, limit=63 [ 456.301760][T13143] attempt to access beyond end of device 17:45:46 executing program 4: [ 456.307859][T13143] loop5: rw=2049, want=142, limit=63 [ 456.313519][T13143] attempt to access beyond end of device [ 456.321085][T13143] loop5: rw=2049, want=143, limit=63 [ 456.326786][T13143] attempt to access beyond end of device [ 456.332908][T13143] loop5: rw=2049, want=144, limit=63 [ 456.378573][T13143] attempt to access beyond end of device [ 456.384609][T13143] loop5: rw=2049, want=145, limit=63 [ 456.428391][T13143] attempt to access beyond end of device [ 456.442601][T13143] loop5: rw=2049, want=153, limit=63 17:45:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(0x0, 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:46 executing program 2: 17:45:46 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 17:45:46 executing program 0: 17:45:46 executing program 3: 17:45:46 executing program 4: 17:45:46 executing program 2: 17:45:46 executing program 3: 17:45:46 executing program 2: 17:45:46 executing program 4: 17:45:46 executing program 0: 17:45:46 executing program 2: [ 456.871498][ T27] audit: type=1804 audit(1581788746.674:186): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/142/bus" dev="sda1" ino=16531 res=1 17:45:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(0x0, 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:47 executing program 3: 17:45:47 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 17:45:47 executing program 0: 17:45:47 executing program 4: 17:45:47 executing program 2: 17:45:47 executing program 3: 17:45:47 executing program 0: 17:45:47 executing program 4: 17:45:47 executing program 2: 17:45:47 executing program 0: 17:45:47 executing program 4: [ 457.609661][ T27] audit: type=1804 audit(1581788747.414:187): pid=13210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/143/bus" dev="sda1" ino=16737 res=1 17:45:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(0x0, 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:47 executing program 3: 17:45:47 executing program 2: 17:45:47 executing program 1: 17:45:47 executing program 4: 17:45:47 executing program 0: 17:45:47 executing program 2: 17:45:47 executing program 1: 17:45:47 executing program 4: 17:45:47 executing program 0: 17:45:47 executing program 3: [ 458.071681][ T27] audit: type=1804 audit(1581788747.874:188): pid=13228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/144/bus" dev="sda1" ino=16676 res=1 17:45:47 executing program 0: [ 458.122872][T13228] attempt to access beyond end of device [ 458.128875][T13228] loop5: rw=2049, want=78, limit=63 [ 458.134076][T13228] attempt to access beyond end of device [ 458.140296][T13228] loop5: rw=2049, want=79, limit=63 [ 458.145599][T13228] attempt to access beyond end of device [ 458.151531][T13228] loop5: rw=2049, want=80, limit=63 [ 458.156728][T13228] attempt to access beyond end of device [ 458.162595][T13228] loop5: rw=2049, want=81, limit=63 [ 458.168358][T13228] attempt to access beyond end of device [ 458.176545][T13228] loop5: rw=2049, want=130, limit=63 [ 458.182129][T13228] attempt to access beyond end of device [ 458.187861][T13228] loop5: rw=2049, want=131, limit=63 [ 458.193488][T13228] attempt to access beyond end of device [ 458.199363][T13228] loop5: rw=2049, want=132, limit=63 [ 458.204711][T13228] attempt to access beyond end of device [ 458.210708][T13228] loop5: rw=2049, want=133, limit=63 [ 458.216108][T13228] attempt to access beyond end of device [ 458.222172][T13228] loop5: rw=2049, want=142, limit=63 [ 458.227500][T13228] attempt to access beyond end of device [ 458.233446][T13228] loop5: rw=2049, want=143, limit=63 [ 458.239061][T13228] attempt to access beyond end of device [ 458.246845][T13228] loop5: rw=2049, want=144, limit=63 [ 458.252461][T13228] attempt to access beyond end of device [ 458.258125][T13228] loop5: rw=2049, want=145, limit=63 [ 458.263832][T13228] attempt to access beyond end of device [ 458.278640][T13228] loop5: rw=2049, want=153, limit=63 17:45:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:48 executing program 1: 17:45:48 executing program 2: 17:45:48 executing program 3: 17:45:48 executing program 4: 17:45:48 executing program 0: 17:45:48 executing program 3: 17:45:48 executing program 2: 17:45:48 executing program 4: 17:45:48 executing program 0: 17:45:48 executing program 1: 17:45:48 executing program 0: [ 458.807862][ T27] audit: type=1804 audit(1581788748.604:189): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/145/bus" dev="sda1" ino=16979 res=1 [ 458.861884][T13255] attempt to access beyond end of device [ 458.909408][T13255] loop5: rw=2049, want=78, limit=63 [ 458.914935][T13255] attempt to access beyond end of device [ 458.921236][T13255] loop5: rw=2049, want=79, limit=63 [ 458.926752][T13255] attempt to access beyond end of device [ 458.932841][T13255] loop5: rw=2049, want=80, limit=63 [ 458.948832][T13255] attempt to access beyond end of device [ 458.978215][T13255] loop5: rw=2049, want=81, limit=63 [ 458.986088][T13255] attempt to access beyond end of device [ 459.011229][T13255] loop5: rw=2049, want=130, limit=63 [ 459.016621][T13255] attempt to access beyond end of device [ 459.022409][T13255] loop5: rw=2049, want=131, limit=63 [ 459.027699][T13255] attempt to access beyond end of device [ 459.033495][T13255] loop5: rw=2049, want=132, limit=63 [ 459.038940][T13255] attempt to access beyond end of device [ 459.045467][T13255] loop5: rw=2049, want=133, limit=63 [ 459.050781][T13255] attempt to access beyond end of device [ 459.056458][T13255] loop5: rw=2049, want=142, limit=63 [ 459.061819][T13255] attempt to access beyond end of device [ 459.067464][T13255] loop5: rw=2049, want=143, limit=63 [ 459.072822][T13255] attempt to access beyond end of device [ 459.078446][T13255] loop5: rw=2049, want=144, limit=63 [ 459.084542][T13255] attempt to access beyond end of device [ 459.090512][T13255] loop5: rw=2049, want=145, limit=63 [ 459.095885][T13255] attempt to access beyond end of device [ 459.101607][T13255] loop5: rw=2049, want=153, limit=63 17:45:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:49 executing program 1: 17:45:49 executing program 2: 17:45:49 executing program 0: 17:45:49 executing program 4: 17:45:49 executing program 3: 17:45:49 executing program 0: 17:45:49 executing program 3: 17:45:49 executing program 1: 17:45:49 executing program 2: 17:45:49 executing program 4: 17:45:49 executing program 0: [ 459.547964][ T27] audit: type=1804 audit(1581788749.344:190): pid=13284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/146/bus" dev="sda1" ino=17111 res=1 [ 459.587061][T13284] attempt to access beyond end of device [ 459.654006][T13284] loop5: rw=2049, want=78, limit=63 [ 459.691606][T13284] buffer_io_error: 50 callbacks suppressed [ 459.691618][T13284] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 459.744347][T13284] attempt to access beyond end of device [ 459.751291][T13284] loop5: rw=2049, want=79, limit=63 [ 459.776415][T13284] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 459.804149][T13284] attempt to access beyond end of device [ 459.809958][T13284] loop5: rw=2049, want=80, limit=63 [ 459.816510][T13284] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 459.825092][T13284] attempt to access beyond end of device [ 459.830769][T13284] loop5: rw=2049, want=81, limit=63 [ 459.835964][T13284] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 459.844519][T13284] attempt to access beyond end of device [ 459.850204][T13284] loop5: rw=2049, want=130, limit=63 [ 459.855475][T13284] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 459.863991][T13284] attempt to access beyond end of device [ 459.869685][T13284] loop5: rw=2049, want=131, limit=63 [ 459.874953][T13284] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 459.883522][T13284] attempt to access beyond end of device [ 459.889177][T13284] loop5: rw=2049, want=132, limit=63 [ 459.894445][T13284] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 459.903072][T13284] attempt to access beyond end of device [ 459.908814][T13284] loop5: rw=2049, want=133, limit=63 [ 459.914109][T13284] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 459.922624][T13284] attempt to access beyond end of device [ 459.928252][T13284] loop5: rw=2049, want=142, limit=63 [ 459.933648][T13284] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 459.942204][T13284] attempt to access beyond end of device [ 459.947953][T13284] loop5: rw=2049, want=143, limit=63 [ 459.953279][T13284] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 459.961789][T13284] attempt to access beyond end of device [ 459.967400][T13284] loop5: rw=2049, want=144, limit=63 [ 459.972724][T13284] attempt to access beyond end of device [ 459.978414][T13284] loop5: rw=2049, want=145, limit=63 [ 459.983747][T13284] attempt to access beyond end of device [ 459.989467][T13284] loop5: rw=2049, want=153, limit=63 17:45:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:49 executing program 1: 17:45:49 executing program 0: 17:45:49 executing program 3: 17:45:49 executing program 2: 17:45:49 executing program 4: 17:45:50 executing program 3: 17:45:50 executing program 2: 17:45:50 executing program 4: 17:45:50 executing program 0: 17:45:50 executing program 1: [ 460.354029][ T27] audit: type=1804 audit(1581788750.144:191): pid=13311 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/147/bus" dev="sda1" ino=17073 res=1 [ 460.363869][T13311] attempt to access beyond end of device 17:45:50 executing program 3: [ 460.405158][T13311] loop5: rw=2049, want=78, limit=63 [ 460.411030][T13311] attempt to access beyond end of device [ 460.501230][T13311] loop5: rw=2049, want=79, limit=63 [ 460.536924][T13311] attempt to access beyond end of device [ 460.557296][T13311] loop5: rw=2049, want=80, limit=63 [ 460.598672][T13311] attempt to access beyond end of device [ 460.630078][T13311] loop5: rw=2049, want=81, limit=63 [ 460.635378][T13311] attempt to access beyond end of device [ 460.641353][T13311] loop5: rw=2049, want=130, limit=63 [ 460.646673][T13311] attempt to access beyond end of device [ 460.655095][T13311] loop5: rw=2049, want=131, limit=63 [ 460.678617][T13311] attempt to access beyond end of device [ 460.685648][T13311] loop5: rw=2049, want=132, limit=63 [ 460.701808][T13311] attempt to access beyond end of device [ 460.707459][T13311] loop5: rw=2049, want=133, limit=63 [ 460.712976][T13311] attempt to access beyond end of device [ 460.719145][T13311] loop5: rw=2049, want=142, limit=63 [ 460.724425][T13311] attempt to access beyond end of device [ 460.730095][T13311] loop5: rw=2049, want=143, limit=63 [ 460.735478][T13311] attempt to access beyond end of device [ 460.741186][T13311] loop5: rw=2049, want=144, limit=63 [ 460.746468][T13311] attempt to access beyond end of device [ 460.752154][T13311] loop5: rw=2049, want=145, limit=63 [ 460.757495][T13311] attempt to access beyond end of device [ 460.763192][T13311] loop5: rw=2049, want=153, limit=63 17:45:50 executing program 3: 17:45:50 executing program 4: 17:45:50 executing program 2: 17:45:50 executing program 0: 17:45:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:50 executing program 1: 17:45:50 executing program 3: 17:45:50 executing program 1: 17:45:50 executing program 2: 17:45:50 executing program 4: 17:45:50 executing program 0: 17:45:50 executing program 3: 17:45:51 executing program 4: 17:45:51 executing program 3: 17:45:51 executing program 2: 17:45:51 executing program 1: [ 461.282665][ T27] audit: type=1804 audit(1581788751.084:192): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/148/bus" dev="sda1" ino=17122 res=1 [ 461.356152][T13342] attempt to access beyond end of device [ 461.417968][T13342] loop5: rw=2049, want=78, limit=63 [ 461.439321][T13342] attempt to access beyond end of device [ 461.471717][T13342] loop5: rw=2049, want=79, limit=63 [ 461.510248][T13342] attempt to access beyond end of device [ 461.528170][T13342] loop5: rw=2049, want=80, limit=63 [ 461.554696][T13342] attempt to access beyond end of device [ 461.561127][T13342] loop5: rw=2049, want=81, limit=63 [ 461.590150][T13342] attempt to access beyond end of device [ 461.601396][T13342] loop5: rw=2049, want=130, limit=63 [ 461.611616][T13342] attempt to access beyond end of device [ 461.617366][T13342] loop5: rw=2049, want=131, limit=63 [ 461.625673][T13342] attempt to access beyond end of device [ 461.631500][T13342] loop5: rw=2049, want=132, limit=63 [ 461.636845][T13342] attempt to access beyond end of device [ 461.645601][T13342] loop5: rw=2049, want=133, limit=63 [ 461.651550][T13342] attempt to access beyond end of device [ 461.657233][T13342] loop5: rw=2049, want=142, limit=63 [ 461.664779][T13342] attempt to access beyond end of device [ 461.670551][T13342] loop5: rw=2049, want=143, limit=63 [ 461.675872][T13342] attempt to access beyond end of device [ 461.684445][T13342] loop5: rw=2049, want=144, limit=63 [ 461.689905][T13342] attempt to access beyond end of device [ 461.695536][T13342] loop5: rw=2049, want=145, limit=63 [ 461.702983][T13342] attempt to access beyond end of device [ 461.708705][T13342] loop5: rw=2049, want=153, limit=63 17:45:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:51 executing program 4: 17:45:51 executing program 0: 17:45:51 executing program 3: 17:45:51 executing program 2: 17:45:51 executing program 1: 17:45:51 executing program 3: 17:45:51 executing program 0: 17:45:51 executing program 1: 17:45:51 executing program 2: 17:45:51 executing program 4: [ 462.123566][ T27] audit: type=1804 audit(1581788751.924:193): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/149/bus" dev="sda1" ino=17112 res=1 17:45:52 executing program 0: [ 462.189373][T13371] attempt to access beyond end of device [ 462.218684][T13371] loop5: rw=2049, want=78, limit=63 [ 462.238496][T13371] attempt to access beyond end of device [ 462.284311][T13371] loop5: rw=2049, want=79, limit=63 [ 462.289776][T13371] attempt to access beyond end of device [ 462.298918][T13371] loop5: rw=2049, want=80, limit=63 [ 462.304193][T13371] attempt to access beyond end of device [ 462.310067][T13371] loop5: rw=2049, want=81, limit=63 [ 462.315422][T13371] attempt to access beyond end of device [ 462.321241][T13371] loop5: rw=2049, want=130, limit=63 [ 462.326590][T13371] attempt to access beyond end of device [ 462.332397][T13371] loop5: rw=2049, want=131, limit=63 [ 462.338425][T13371] attempt to access beyond end of device [ 462.354044][T13371] loop5: rw=2049, want=132, limit=63 [ 462.384858][T13371] attempt to access beyond end of device [ 462.400770][T13371] loop5: rw=2049, want=133, limit=63 [ 462.406131][T13371] attempt to access beyond end of device [ 462.423452][T13371] loop5: rw=2049, want=142, limit=63 [ 462.428960][T13371] attempt to access beyond end of device [ 462.434644][T13371] loop5: rw=2049, want=143, limit=63 [ 462.440085][T13371] attempt to access beyond end of device [ 462.445807][T13371] loop5: rw=2049, want=144, limit=63 [ 462.451399][T13371] attempt to access beyond end of device [ 462.457084][T13371] loop5: rw=2049, want=145, limit=63 [ 462.462598][T13371] attempt to access beyond end of device [ 462.468265][T13371] loop5: rw=2049, want=153, limit=63 17:45:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:52 executing program 0: 17:45:52 executing program 1: 17:45:52 executing program 3: 17:45:52 executing program 2: 17:45:52 executing program 4: 17:45:52 executing program 2: 17:45:52 executing program 0: 17:45:52 executing program 3: 17:45:52 executing program 1: [ 462.813535][ T27] audit: type=1804 audit(1581788752.614:194): pid=13397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/150/bus" dev="sda1" ino=17119 res=1 17:45:52 executing program 4: 17:45:52 executing program 2: [ 462.899928][T13397] attempt to access beyond end of device [ 462.928697][T13397] loop5: rw=2049, want=78, limit=63 [ 462.934002][T13397] attempt to access beyond end of device [ 462.998387][T13397] loop5: rw=2049, want=79, limit=63 [ 463.048658][T13397] attempt to access beyond end of device [ 463.087888][T13397] loop5: rw=2049, want=80, limit=63 [ 463.136401][T13397] attempt to access beyond end of device [ 463.142401][T13397] loop5: rw=2049, want=81, limit=63 [ 463.148481][T13397] attempt to access beyond end of device [ 463.156620][T13397] loop5: rw=2049, want=130, limit=63 [ 463.167466][T13397] attempt to access beyond end of device [ 463.173291][T13397] loop5: rw=2049, want=131, limit=63 [ 463.178694][T13397] attempt to access beyond end of device [ 463.184322][T13397] loop5: rw=2049, want=132, limit=63 [ 463.189753][T13397] attempt to access beyond end of device [ 463.195378][T13397] loop5: rw=2049, want=133, limit=63 [ 463.200768][T13397] attempt to access beyond end of device [ 463.206395][T13397] loop5: rw=2049, want=142, limit=63 [ 463.211752][T13397] attempt to access beyond end of device [ 463.217382][T13397] loop5: rw=2049, want=143, limit=63 [ 463.222731][T13397] attempt to access beyond end of device [ 463.228360][T13397] loop5: rw=2049, want=144, limit=63 [ 463.233704][T13397] attempt to access beyond end of device [ 463.239355][T13397] loop5: rw=2049, want=145, limit=63 [ 463.244770][T13397] attempt to access beyond end of device [ 463.250480][T13397] loop5: rw=2049, want=153, limit=63 17:45:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:53 executing program 0: 17:45:53 executing program 1: 17:45:53 executing program 3: 17:45:53 executing program 4: 17:45:53 executing program 2: 17:45:53 executing program 1: 17:45:53 executing program 3: 17:45:53 executing program 2: 17:45:53 executing program 0: 17:45:53 executing program 4: 17:45:53 executing program 1: [ 463.698428][ T27] audit: type=1804 audit(1581788753.494:195): pid=13438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/151/bus" dev="sda1" ino=17135 res=1 17:45:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:53 executing program 1: 17:45:53 executing program 0: 17:45:53 executing program 3: 17:45:53 executing program 4: 17:45:53 executing program 2: 17:45:53 executing program 2: 17:45:53 executing program 1: 17:45:53 executing program 3: 17:45:53 executing program 4: 17:45:53 executing program 0: [ 464.181258][ T27] audit: type=1804 audit(1581788753.984:196): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/152/bus" dev="sda1" ino=17025 res=1 [ 464.222223][T13453] attempt to access beyond end of device [ 464.237521][T13453] loop5: rw=2049, want=78, limit=63 [ 464.242920][T13453] attempt to access beyond end of device [ 464.256963][T13453] loop5: rw=2049, want=79, limit=63 [ 464.262767][T13453] attempt to access beyond end of device [ 464.269118][T13453] loop5: rw=2049, want=80, limit=63 [ 464.276492][T13453] attempt to access beyond end of device [ 464.282751][T13453] loop5: rw=2049, want=81, limit=63 [ 464.288063][T13453] attempt to access beyond end of device [ 464.294253][T13453] loop5: rw=2049, want=130, limit=63 [ 464.299877][T13453] attempt to access beyond end of device [ 464.305578][T13453] loop5: rw=2049, want=131, limit=63 [ 464.311841][T13453] attempt to access beyond end of device [ 464.317529][T13453] loop5: rw=2049, want=132, limit=63 [ 464.323155][T13453] attempt to access beyond end of device [ 464.337810][T13453] loop5: rw=2049, want=133, limit=63 [ 464.348969][T13453] attempt to access beyond end of device [ 464.358844][T13453] loop5: rw=2049, want=142, limit=63 17:45:54 executing program 3: [ 464.374606][T13453] attempt to access beyond end of device [ 464.385035][T13453] loop5: rw=2049, want=143, limit=63 [ 464.401760][T13453] attempt to access beyond end of device [ 464.448499][T13453] loop5: rw=2049, want=144, limit=63 [ 464.465335][T13453] attempt to access beyond end of device [ 464.487056][T13453] loop5: rw=2049, want=145, limit=63 [ 464.495891][T13453] attempt to access beyond end of device [ 464.532069][T13453] loop5: rw=2049, want=153, limit=63 17:45:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:54 executing program 1: 17:45:54 executing program 0: 17:45:54 executing program 4: 17:45:54 executing program 2: 17:45:54 executing program 3: 17:45:54 executing program 3: 17:45:54 executing program 0: 17:45:54 executing program 1: 17:45:54 executing program 4: 17:45:54 executing program 2: [ 464.945585][ T27] audit: type=1804 audit(1581788754.744:197): pid=13484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/153/bus" dev="sda1" ino=17148 res=1 17:45:54 executing program 3: [ 465.050252][T13484] attempt to access beyond end of device [ 465.094539][T13484] loop5: rw=2049, want=78, limit=63 [ 465.105969][T13484] buffer_io_error: 62 callbacks suppressed [ 465.105980][T13484] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 465.162377][T13484] attempt to access beyond end of device [ 465.180790][T13484] loop5: rw=2049, want=79, limit=63 [ 465.244491][T13484] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 465.267384][T13484] attempt to access beyond end of device [ 465.273179][T13484] loop5: rw=2049, want=80, limit=63 [ 465.278367][T13484] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 465.287428][T13484] attempt to access beyond end of device [ 465.293232][T13484] loop5: rw=2049, want=81, limit=63 [ 465.298424][T13484] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 465.306999][T13484] attempt to access beyond end of device [ 465.312644][T13484] loop5: rw=2049, want=130, limit=63 [ 465.317908][T13484] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 465.326447][T13484] attempt to access beyond end of device [ 465.332130][T13484] loop5: rw=2049, want=131, limit=63 [ 465.337444][T13484] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 465.346054][T13484] attempt to access beyond end of device [ 465.352424][T13484] loop5: rw=2049, want=132, limit=63 [ 465.357780][T13484] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 465.366303][T13484] attempt to access beyond end of device [ 465.371947][T13484] loop5: rw=2049, want=133, limit=63 [ 465.377212][T13484] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 465.385774][T13484] attempt to access beyond end of device [ 465.391638][T13484] loop5: rw=2049, want=142, limit=63 [ 465.397021][T13484] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 465.405544][T13484] attempt to access beyond end of device [ 465.411398][T13484] loop5: rw=2049, want=143, limit=63 [ 465.416669][T13484] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 465.425283][T13484] attempt to access beyond end of device [ 465.430944][T13484] loop5: rw=2049, want=144, limit=63 [ 465.436216][T13484] attempt to access beyond end of device [ 465.441892][T13484] loop5: rw=2049, want=145, limit=63 [ 465.447275][T13484] attempt to access beyond end of device [ 465.453031][T13484] loop5: rw=2049, want=153, limit=63 17:45:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, 0x0) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:55 executing program 4: 17:45:55 executing program 0: 17:45:55 executing program 2: 17:45:55 executing program 1: 17:45:55 executing program 3: 17:45:55 executing program 1: 17:45:55 executing program 0: 17:45:55 executing program 3: 17:45:55 executing program 4: 17:45:55 executing program 2: [ 465.876009][ T27] audit: type=1804 audit(1581788755.674:198): pid=13518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/154/bus" dev="sda1" ino=17163 res=1 17:45:55 executing program 4: [ 465.974869][T13518] attempt to access beyond end of device [ 466.036790][T13518] loop5: rw=2049, want=78, limit=63 [ 466.042574][T13518] attempt to access beyond end of device [ 466.048245][T13518] loop5: rw=2049, want=79, limit=63 [ 466.053834][T13518] attempt to access beyond end of device [ 466.059739][T13518] loop5: rw=2049, want=80, limit=63 [ 466.067465][T13518] attempt to access beyond end of device [ 466.073470][T13518] loop5: rw=2049, want=81, limit=63 [ 466.078964][T13518] attempt to access beyond end of device [ 466.084633][T13518] loop5: rw=2049, want=130, limit=63 [ 466.094793][T13518] attempt to access beyond end of device [ 466.100714][T13518] loop5: rw=2049, want=131, limit=63 [ 466.106053][T13518] attempt to access beyond end of device [ 466.113150][T13518] loop5: rw=2049, want=132, limit=63 [ 466.118470][T13518] attempt to access beyond end of device [ 466.124418][T13518] loop5: rw=2049, want=133, limit=63 [ 466.129892][T13518] attempt to access beyond end of device [ 466.135591][T13518] loop5: rw=2049, want=142, limit=63 [ 466.141189][T13518] attempt to access beyond end of device [ 466.146875][T13518] loop5: rw=2049, want=143, limit=63 [ 466.152539][T13518] attempt to access beyond end of device [ 466.158171][T13518] loop5: rw=2049, want=144, limit=63 [ 466.166610][T13518] attempt to access beyond end of device [ 466.172485][T13518] loop5: rw=2049, want=145, limit=63 [ 466.177853][T13518] attempt to access beyond end of device [ 466.183818][T13518] loop5: rw=2049, want=153, limit=63 17:45:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, 0x0) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:56 executing program 1: 17:45:56 executing program 3: 17:45:56 executing program 4: 17:45:56 executing program 0: 17:45:56 executing program 2: 17:45:56 executing program 0: 17:45:56 executing program 1: 17:45:56 executing program 2: 17:45:56 executing program 4: 17:45:56 executing program 3: [ 466.586262][ T27] audit: type=1804 audit(1581788756.384:199): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/155/bus" dev="sda1" ino=17175 res=1 17:45:56 executing program 3: [ 466.729919][T13540] attempt to access beyond end of device [ 466.735600][T13540] loop5: rw=2049, want=78, limit=63 [ 466.758678][T13540] attempt to access beyond end of device [ 466.774069][T13540] loop5: rw=2049, want=79, limit=63 [ 466.845134][T13540] attempt to access beyond end of device [ 466.861321][T13540] loop5: rw=2049, want=80, limit=63 [ 466.886247][T13540] attempt to access beyond end of device [ 466.896260][T13540] loop5: rw=2049, want=81, limit=63 [ 466.901838][T13540] attempt to access beyond end of device [ 466.907481][T13540] loop5: rw=2049, want=130, limit=63 [ 466.915332][T13540] attempt to access beyond end of device [ 466.921329][T13540] loop5: rw=2049, want=131, limit=63 [ 466.926764][T13540] attempt to access beyond end of device [ 466.934025][T13540] loop5: rw=2049, want=132, limit=63 [ 466.939555][T13540] attempt to access beyond end of device [ 466.945175][T13540] loop5: rw=2049, want=133, limit=63 [ 466.950616][T13540] attempt to access beyond end of device [ 466.956244][T13540] loop5: rw=2049, want=142, limit=63 [ 466.961620][T13540] attempt to access beyond end of device [ 466.967247][T13540] loop5: rw=2049, want=143, limit=63 [ 466.972558][T13540] attempt to access beyond end of device [ 466.978184][T13540] loop5: rw=2049, want=144, limit=63 [ 466.983550][T13540] attempt to access beyond end of device [ 466.989568][T13540] loop5: rw=2049, want=145, limit=63 [ 466.994867][T13540] attempt to access beyond end of device [ 467.000666][T13540] loop5: rw=2049, want=153, limit=63 17:45:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, 0x0) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:56 executing program 0: 17:45:56 executing program 1: 17:45:56 executing program 4: 17:45:56 executing program 2: 17:45:56 executing program 3: 17:45:56 executing program 0: 17:45:57 executing program 4: 17:45:57 executing program 3: 17:45:57 executing program 1: 17:45:57 executing program 2: [ 467.304188][ T27] audit: type=1804 audit(1581788757.104:200): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/156/bus" dev="sda1" ino=17183 res=1 17:45:57 executing program 2: [ 467.380134][T13568] attempt to access beyond end of device [ 467.385946][T13568] loop5: rw=2049, want=78, limit=63 [ 467.484147][T13568] attempt to access beyond end of device [ 467.517547][T13568] loop5: rw=2049, want=79, limit=63 [ 467.549974][T13568] attempt to access beyond end of device [ 467.587335][T13568] loop5: rw=2049, want=80, limit=63 [ 467.598594][T13568] attempt to access beyond end of device [ 467.624230][T13568] loop5: rw=2049, want=81, limit=63 [ 467.633754][T13568] attempt to access beyond end of device [ 467.639800][T13568] loop5: rw=2049, want=130, limit=63 [ 467.645241][T13568] attempt to access beyond end of device [ 467.651267][T13568] loop5: rw=2049, want=131, limit=63 [ 467.666546][T13568] attempt to access beyond end of device [ 467.672573][T13568] loop5: rw=2049, want=132, limit=63 [ 467.685320][T13568] attempt to access beyond end of device [ 467.691113][T13568] loop5: rw=2049, want=133, limit=63 [ 467.696641][T13568] attempt to access beyond end of device [ 467.705293][T13568] loop5: rw=2049, want=142, limit=63 [ 467.710719][T13568] attempt to access beyond end of device [ 467.716401][T13568] loop5: rw=2049, want=143, limit=63 [ 467.724400][T13568] attempt to access beyond end of device [ 467.730142][T13568] loop5: rw=2049, want=144, limit=63 [ 467.735466][T13568] attempt to access beyond end of device [ 467.743445][T13568] loop5: rw=2049, want=145, limit=63 [ 467.748809][T13568] attempt to access beyond end of device [ 467.754635][T13568] loop5: rw=2049, want=153, limit=63 17:45:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, &(0x7f0000000540)) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:57 executing program 4: 17:45:57 executing program 2: 17:45:57 executing program 0: 17:45:57 executing program 3: 17:45:57 executing program 1: 17:45:57 executing program 3: 17:45:57 executing program 1: 17:45:57 executing program 4: 17:45:57 executing program 2: 17:45:57 executing program 0: 17:45:58 executing program 1: [ 468.218579][ T27] audit: type=1804 audit(1581788758.014:201): pid=13600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/157/bus" dev="sda1" ino=17187 res=1 [ 468.277008][T13600] attempt to access beyond end of device [ 468.298853][T13600] loop5: rw=2049, want=78, limit=63 [ 468.320019][T13600] attempt to access beyond end of device [ 468.327436][T13600] loop5: rw=2049, want=79, limit=63 [ 468.334257][T13600] attempt to access beyond end of device [ 468.366608][T13600] loop5: rw=2049, want=80, limit=63 [ 468.410305][T13600] attempt to access beyond end of device [ 468.422040][T13600] loop5: rw=2049, want=81, limit=63 [ 468.439926][T13600] attempt to access beyond end of device [ 468.445670][T13600] loop5: rw=2049, want=130, limit=63 [ 468.461450][T13600] attempt to access beyond end of device [ 468.467153][T13600] loop5: rw=2049, want=131, limit=63 [ 468.472810][T13600] attempt to access beyond end of device [ 468.478489][T13600] loop5: rw=2049, want=132, limit=63 [ 468.484152][T13600] attempt to access beyond end of device [ 468.491252][T13600] loop5: rw=2049, want=133, limit=63 [ 468.496610][T13600] attempt to access beyond end of device [ 468.502452][T13600] loop5: rw=2049, want=142, limit=63 [ 468.507787][T13600] attempt to access beyond end of device [ 468.513574][T13600] loop5: rw=2049, want=143, limit=63 [ 468.519132][T13600] attempt to access beyond end of device [ 468.524798][T13600] loop5: rw=2049, want=144, limit=63 [ 468.530117][T13600] attempt to access beyond end of device [ 468.535747][T13600] loop5: rw=2049, want=145, limit=63 [ 468.541134][T13600] attempt to access beyond end of device [ 468.546809][T13600] loop5: rw=2049, want=153, limit=63 17:45:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, &(0x7f0000000540)) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:58 executing program 0: 17:45:58 executing program 3: 17:45:58 executing program 2: 17:45:58 executing program 4: 17:45:58 executing program 1: 17:45:58 executing program 2: 17:45:58 executing program 3: 17:45:58 executing program 4: 17:45:58 executing program 0: 17:45:58 executing program 1: 17:45:58 executing program 2: [ 468.995759][ T27] audit: type=1804 audit(1581788758.794:202): pid=13623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/158/bus" dev="sda1" ino=17183 res=1 [ 469.031422][T13623] attempt to access beyond end of device [ 469.037077][T13623] loop5: rw=2049, want=78, limit=63 [ 469.142299][T13623] attempt to access beyond end of device [ 469.165309][T13623] loop5: rw=2049, want=79, limit=63 [ 469.181039][T13623] attempt to access beyond end of device [ 469.206746][T13623] loop5: rw=2049, want=80, limit=63 [ 469.215025][T13623] attempt to access beyond end of device [ 469.220737][T13623] loop5: rw=2049, want=81, limit=63 [ 469.226033][T13623] attempt to access beyond end of device [ 469.234316][T13623] loop5: rw=2049, want=130, limit=63 [ 469.239666][T13623] attempt to access beyond end of device [ 469.245371][T13623] loop5: rw=2049, want=131, limit=63 [ 469.257611][T13623] attempt to access beyond end of device [ 469.264219][T13623] loop5: rw=2049, want=132, limit=63 [ 469.272356][T13623] attempt to access beyond end of device [ 469.278004][T13623] loop5: rw=2049, want=133, limit=63 [ 469.283303][T13623] attempt to access beyond end of device [ 469.290955][T13623] loop5: rw=2049, want=142, limit=63 [ 469.296235][T13623] attempt to access beyond end of device [ 469.301970][T13623] loop5: rw=2049, want=143, limit=63 [ 469.307355][T13623] attempt to access beyond end of device [ 469.314976][T13623] loop5: rw=2049, want=144, limit=63 [ 469.320546][T13623] attempt to access beyond end of device [ 469.326161][T13623] loop5: rw=2049, want=145, limit=63 [ 469.331632][T13623] attempt to access beyond end of device [ 469.337261][T13623] loop5: rw=2049, want=153, limit=63 17:45:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x0, &(0x7f0000000540)) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:59 executing program 4: 17:45:59 executing program 0: 17:45:59 executing program 3: 17:45:59 executing program 1: 17:45:59 executing program 2: 17:45:59 executing program 0: 17:45:59 executing program 4: 17:45:59 executing program 1: 17:45:59 executing program 3: 17:45:59 executing program 2: [ 469.765252][ T27] audit: type=1804 audit(1581788759.564:203): pid=13657 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/159/bus" dev="sda1" ino=17196 res=1 [ 469.773250][T13657] attempt to access beyond end of device [ 469.795487][T13657] loop5: rw=2049, want=78, limit=63 [ 469.800858][T13657] attempt to access beyond end of device [ 469.806559][T13657] loop5: rw=2049, want=79, limit=63 [ 469.812028][T13657] attempt to access beyond end of device [ 469.817717][T13657] loop5: rw=2049, want=80, limit=63 [ 469.823344][T13657] attempt to access beyond end of device [ 469.829190][T13657] loop5: rw=2049, want=81, limit=63 [ 469.834686][T13657] attempt to access beyond end of device [ 469.840479][T13657] loop5: rw=2049, want=130, limit=63 [ 469.845899][T13657] attempt to access beyond end of device [ 469.851709][T13657] loop5: rw=2049, want=131, limit=63 [ 469.857178][T13657] attempt to access beyond end of device [ 469.863056][T13657] loop5: rw=2049, want=132, limit=63 [ 469.868403][T13657] attempt to access beyond end of device [ 469.874243][T13657] loop5: rw=2049, want=133, limit=63 [ 469.879640][T13657] attempt to access beyond end of device [ 469.885372][T13657] loop5: rw=2049, want=142, limit=63 [ 469.890868][T13657] attempt to access beyond end of device [ 469.896837][T13657] loop5: rw=2049, want=143, limit=63 [ 469.902416][T13657] attempt to access beyond end of device [ 469.908105][T13657] loop5: rw=2049, want=144, limit=63 17:45:59 executing program 1: [ 469.913561][T13657] attempt to access beyond end of device [ 469.919300][T13657] loop5: rw=2049, want=145, limit=63 [ 469.924728][T13657] attempt to access beyond end of device [ 469.930530][T13657] loop5: rw=2049, want=153, limit=63 17:45:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[0x0]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:45:59 executing program 2: 17:45:59 executing program 4: 17:45:59 executing program 0: 17:45:59 executing program 3: 17:45:59 executing program 1: 17:46:00 executing program 4: 17:46:00 executing program 2: 17:46:00 executing program 3: 17:46:00 executing program 0: 17:46:00 executing program 1: 17:46:00 executing program 3: [ 470.464043][ T27] audit: type=1804 audit(1581788760.264:204): pid=13682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/160/bus" dev="sda1" ino=17202 res=1 [ 470.550010][T13682] attempt to access beyond end of device [ 470.591864][T13682] loop5: rw=2049, want=78, limit=63 [ 470.613828][T13682] buffer_io_error: 74 callbacks suppressed [ 470.613841][T13682] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 470.650518][T13682] attempt to access beyond end of device [ 470.691418][T13682] loop5: rw=2049, want=79, limit=63 [ 470.714257][T13682] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 470.722870][T13682] attempt to access beyond end of device [ 470.728689][T13682] loop5: rw=2049, want=80, limit=63 [ 470.733948][T13682] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 470.742591][T13682] attempt to access beyond end of device [ 470.748263][T13682] loop5: rw=2049, want=81, limit=63 [ 470.753694][T13682] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 470.762362][T13682] attempt to access beyond end of device [ 470.767991][T13682] loop5: rw=2049, want=130, limit=63 [ 470.773412][T13682] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 470.781982][T13682] attempt to access beyond end of device [ 470.787617][T13682] loop5: rw=2049, want=131, limit=63 [ 470.792964][T13682] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 470.801471][T13682] attempt to access beyond end of device [ 470.807081][T13682] loop5: rw=2049, want=132, limit=63 [ 470.812392][T13682] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 470.820917][T13682] attempt to access beyond end of device [ 470.826537][T13682] loop5: rw=2049, want=133, limit=63 [ 470.831827][T13682] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 470.840363][T13682] attempt to access beyond end of device [ 470.846000][T13682] loop5: rw=2049, want=142, limit=63 [ 470.851360][T13682] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 470.859925][T13682] attempt to access beyond end of device [ 470.865551][T13682] loop5: rw=2049, want=143, limit=63 [ 470.870848][T13682] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 470.879372][T13682] attempt to access beyond end of device [ 470.884990][T13682] loop5: rw=2049, want=144, limit=63 [ 470.890343][T13682] attempt to access beyond end of device [ 470.895972][T13682] loop5: rw=2049, want=145, limit=63 [ 470.901428][T13682] attempt to access beyond end of device [ 470.907053][T13682] loop5: rw=2049, want=153, limit=63 17:46:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[0x0]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:00 executing program 4: 17:46:00 executing program 3: 17:46:00 executing program 0: 17:46:00 executing program 1: 17:46:00 executing program 2: 17:46:00 executing program 0: 17:46:00 executing program 2: 17:46:00 executing program 4: 17:46:00 executing program 3: 17:46:01 executing program 4: 17:46:01 executing program 1: [ 471.371390][ T27] audit: type=1804 audit(1581788761.174:205): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/161/bus" dev="sda1" ino=17213 res=1 [ 471.442729][T13712] attempt to access beyond end of device [ 471.448465][T13712] loop5: rw=2049, want=78, limit=63 [ 471.509036][T13712] attempt to access beyond end of device [ 471.543961][T13712] loop5: rw=2049, want=79, limit=63 [ 471.554816][T13712] attempt to access beyond end of device [ 471.560558][T13712] loop5: rw=2049, want=80, limit=63 [ 471.565800][T13712] attempt to access beyond end of device [ 471.571589][T13712] loop5: rw=2049, want=81, limit=63 [ 471.601457][T13712] attempt to access beyond end of device [ 471.607181][T13712] loop5: rw=2049, want=130, limit=63 [ 471.621012][T13712] attempt to access beyond end of device [ 471.626676][T13712] loop5: rw=2049, want=131, limit=63 [ 471.632026][T13712] attempt to access beyond end of device [ 471.637820][T13712] loop5: rw=2049, want=132, limit=63 [ 471.644557][T13712] attempt to access beyond end of device [ 471.650728][T13712] loop5: rw=2049, want=133, limit=63 [ 471.656079][T13712] attempt to access beyond end of device [ 471.661801][T13712] loop5: rw=2049, want=142, limit=63 [ 471.667087][T13712] attempt to access beyond end of device [ 471.672989][T13712] loop5: rw=2049, want=143, limit=63 [ 471.678304][T13712] attempt to access beyond end of device [ 471.683988][T13712] loop5: rw=2049, want=144, limit=63 [ 471.690142][T13712] attempt to access beyond end of device [ 471.695768][T13712] loop5: rw=2049, want=145, limit=63 [ 471.701345][T13712] attempt to access beyond end of device [ 471.707035][T13712] loop5: rw=2049, want=153, limit=63 17:46:01 executing program 2: 17:46:01 executing program 0: 17:46:01 executing program 3: 17:46:01 executing program 4: 17:46:01 executing program 1: 17:46:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[0x0]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:01 executing program 0: 17:46:01 executing program 2: 17:46:01 executing program 3: 17:46:01 executing program 1: 17:46:01 executing program 4: 17:46:01 executing program 2: [ 472.162707][ T27] audit: type=1804 audit(1581788761.964:206): pid=13744 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/162/bus" dev="sda1" ino=17208 res=1 17:46:02 executing program 2: 17:46:02 executing program 0: 17:46:02 executing program 4: [ 472.265667][T13731] attempt to access beyond end of device [ 472.290815][T13731] loop5: rw=2049, want=78, limit=63 17:46:02 executing program 1: 17:46:02 executing program 2: [ 472.336724][T13731] attempt to access beyond end of device [ 472.361903][T13731] loop5: rw=2049, want=79, limit=63 [ 472.402716][T13731] attempt to access beyond end of device [ 472.421519][T13731] loop5: rw=2049, want=80, limit=63 [ 472.426832][T13731] attempt to access beyond end of device [ 472.476622][T13731] loop5: rw=2049, want=81, limit=63 [ 472.497999][T13731] attempt to access beyond end of device [ 472.526076][T13731] loop5: rw=2049, want=130, limit=63 [ 472.543572][T13731] attempt to access beyond end of device [ 472.561309][T13731] loop5: rw=2049, want=131, limit=63 [ 472.566629][T13731] attempt to access beyond end of device [ 472.664160][T13731] loop5: rw=2049, want=132, limit=63 [ 472.670612][T13731] attempt to access beyond end of device [ 472.676242][T13731] loop5: rw=2049, want=133, limit=63 [ 472.681600][T13731] attempt to access beyond end of device [ 472.696580][T13731] loop5: rw=2049, want=142, limit=63 [ 472.705749][T13731] attempt to access beyond end of device [ 472.711547][T13731] loop5: rw=2049, want=143, limit=63 [ 472.716837][T13731] attempt to access beyond end of device [ 472.730674][T13731] loop5: rw=2049, want=144, limit=63 [ 472.735971][T13731] attempt to access beyond end of device [ 472.742512][T13731] loop5: rw=2049, want=145, limit=63 [ 472.747819][T13731] attempt to access beyond end of device [ 472.753468][T13731] loop5: rw=2049, want=153, limit=63 17:46:02 executing program 4: 17:46:02 executing program 3: 17:46:02 executing program 2: 17:46:02 executing program 0: 17:46:02 executing program 1: 17:46:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:02 executing program 2: 17:46:02 executing program 4: 17:46:02 executing program 0: 17:46:02 executing program 3: 17:46:02 executing program 1: [ 473.199197][ T27] audit: type=1804 audit(1581788763.004:207): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/163/bus" dev="sda1" ino=17217 res=1 17:46:03 executing program 1: 17:46:03 executing program 4: [ 473.240574][T13779] attempt to access beyond end of device [ 473.258269][T13779] loop5: rw=2049, want=78, limit=63 [ 473.263905][T13779] attempt to access beyond end of device [ 473.278604][T13779] loop5: rw=2049, want=79, limit=63 [ 473.284097][T13779] attempt to access beyond end of device 17:46:03 executing program 2: 17:46:03 executing program 3: [ 473.309582][T13779] loop5: rw=2049, want=80, limit=63 [ 473.320613][T13779] attempt to access beyond end of device [ 473.337970][T13779] loop5: rw=2049, want=81, limit=63 17:46:03 executing program 0: [ 473.364959][T13779] attempt to access beyond end of device [ 473.374479][T13779] loop5: rw=2049, want=130, limit=63 [ 473.382097][T13779] attempt to access beyond end of device [ 473.424061][T13779] loop5: rw=2049, want=131, limit=63 [ 473.454092][T13779] attempt to access beyond end of device [ 473.496041][T13779] loop5: rw=2049, want=132, limit=63 17:46:03 executing program 4: [ 473.526325][T13779] attempt to access beyond end of device [ 473.538954][T13779] loop5: rw=2049, want=133, limit=63 [ 473.551015][T13779] attempt to access beyond end of device [ 473.578667][T13779] loop5: rw=2049, want=142, limit=63 [ 473.586694][T13779] attempt to access beyond end of device [ 473.610284][T13779] loop5: rw=2049, want=143, limit=63 [ 473.650753][T13779] attempt to access beyond end of device [ 473.657553][T13779] loop5: rw=2049, want=144, limit=63 [ 473.697240][T13779] attempt to access beyond end of device [ 473.721529][T13779] loop5: rw=2049, want=145, limit=63 [ 473.737546][T13779] attempt to access beyond end of device [ 473.746219][T13779] loop5: rw=2049, want=153, limit=63 17:46:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:03 executing program 1: 17:46:03 executing program 3: 17:46:03 executing program 2: 17:46:03 executing program 0: 17:46:03 executing program 4: 17:46:03 executing program 3: 17:46:03 executing program 1: 17:46:03 executing program 0: 17:46:03 executing program 4: 17:46:03 executing program 2: 17:46:04 executing program 1: [ 474.188024][ T27] audit: type=1804 audit(1581788763.984:208): pid=13813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/164/bus" dev="sda1" ino=17212 res=1 [ 474.283448][T13813] attempt to access beyond end of device [ 474.353509][T13813] loop5: rw=2049, want=78, limit=63 [ 474.381571][T13813] attempt to access beyond end of device [ 474.418734][T13813] loop5: rw=2049, want=79, limit=63 [ 474.423992][T13813] attempt to access beyond end of device [ 474.432625][T13813] loop5: rw=2049, want=80, limit=63 [ 474.438473][T13813] attempt to access beyond end of device [ 474.444569][T13813] loop5: rw=2049, want=81, limit=63 [ 474.453624][T13813] attempt to access beyond end of device [ 474.461016][T13813] loop5: rw=2049, want=130, limit=63 [ 474.466852][T13813] attempt to access beyond end of device [ 474.473018][T13813] loop5: rw=2049, want=131, limit=63 [ 474.478369][T13813] attempt to access beyond end of device [ 474.484099][T13813] loop5: rw=2049, want=132, limit=63 [ 474.489555][T13813] attempt to access beyond end of device [ 474.495171][T13813] loop5: rw=2049, want=133, limit=63 [ 474.500696][T13813] attempt to access beyond end of device [ 474.506325][T13813] loop5: rw=2049, want=142, limit=63 [ 474.511624][T13813] attempt to access beyond end of device [ 474.517279][T13813] loop5: rw=2049, want=143, limit=63 [ 474.522626][T13813] attempt to access beyond end of device [ 474.528357][T13813] loop5: rw=2049, want=144, limit=63 [ 474.533705][T13813] attempt to access beyond end of device [ 474.539362][T13813] loop5: rw=2049, want=145, limit=63 [ 474.544682][T13813] attempt to access beyond end of device [ 474.550347][T13813] loop5: rw=2049, want=153, limit=63 17:46:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:04 executing program 0: 17:46:04 executing program 2: 17:46:04 executing program 3: 17:46:04 executing program 4: 17:46:04 executing program 1: 17:46:04 executing program 1: 17:46:04 executing program 2: 17:46:04 executing program 4: 17:46:04 executing program 3: 17:46:04 executing program 0: [ 474.859769][ T27] audit: type=1804 audit(1581788764.664:209): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/165/bus" dev="sda1" ino=17192 res=1 [ 474.872457][T13835] attempt to access beyond end of device [ 474.898606][T13835] loop5: rw=2049, want=78, limit=63 [ 474.903898][T13835] attempt to access beyond end of device 17:46:04 executing program 2: [ 475.054669][T13835] loop5: rw=2049, want=79, limit=63 [ 475.068642][T13835] attempt to access beyond end of device [ 475.077980][T13835] loop5: rw=2049, want=80, limit=63 [ 475.100053][T13835] attempt to access beyond end of device [ 475.118435][T13835] loop5: rw=2049, want=81, limit=63 [ 475.123855][T13835] attempt to access beyond end of device [ 475.129666][T13835] loop5: rw=2049, want=130, limit=63 [ 475.137210][T13835] attempt to access beyond end of device [ 475.143072][T13835] loop5: rw=2049, want=131, limit=63 [ 475.148586][T13835] attempt to access beyond end of device [ 475.154384][T13835] loop5: rw=2049, want=132, limit=63 [ 475.201698][T13835] attempt to access beyond end of device [ 475.228655][T13835] loop5: rw=2049, want=133, limit=63 [ 475.263465][T13835] attempt to access beyond end of device [ 475.276542][T13835] loop5: rw=2049, want=142, limit=63 [ 475.283022][T13835] attempt to access beyond end of device [ 475.288807][T13835] loop5: rw=2049, want=143, limit=63 [ 475.294096][T13835] attempt to access beyond end of device [ 475.299774][T13835] loop5: rw=2049, want=144, limit=63 [ 475.305057][T13835] attempt to access beyond end of device [ 475.310895][T13835] loop5: rw=2049, want=145, limit=63 [ 475.316239][T13835] attempt to access beyond end of device [ 475.321895][T13835] loop5: rw=2049, want=153, limit=63 17:46:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:05 executing program 2: 17:46:05 executing program 3: 17:46:05 executing program 1: 17:46:05 executing program 0: 17:46:05 executing program 4: 17:46:05 executing program 2: 17:46:05 executing program 4: 17:46:05 executing program 1: 17:46:05 executing program 0: 17:46:05 executing program 3: 17:46:05 executing program 4: [ 475.801355][ T27] audit: type=1804 audit(1581788765.604:210): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/166/bus" dev="sda1" ino=17188 res=1 [ 475.863098][T13870] attempt to access beyond end of device [ 475.918703][T13870] loop5: rw=2049, want=78, limit=63 [ 475.933127][T13870] buffer_io_error: 62 callbacks suppressed [ 475.933142][T13870] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 475.970474][T13870] attempt to access beyond end of device [ 476.004608][T13870] loop5: rw=2049, want=79, limit=63 [ 476.017434][T13870] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 476.027929][T13870] attempt to access beyond end of device [ 476.043104][T13870] loop5: rw=2049, want=80, limit=63 [ 476.048327][T13870] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 476.056812][T13870] attempt to access beyond end of device [ 476.062526][T13870] loop5: rw=2049, want=81, limit=63 [ 476.067736][T13870] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 476.076224][T13870] attempt to access beyond end of device [ 476.081871][T13870] loop5: rw=2049, want=130, limit=63 [ 476.087177][T13870] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 476.095697][T13870] attempt to access beyond end of device [ 476.101360][T13870] loop5: rw=2049, want=131, limit=63 [ 476.106677][T13870] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 476.115246][T13870] attempt to access beyond end of device [ 476.120911][T13870] loop5: rw=2049, want=132, limit=63 [ 476.126191][T13870] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 476.134921][T13870] attempt to access beyond end of device [ 476.140592][T13870] loop5: rw=2049, want=133, limit=63 [ 476.145875][T13870] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 476.154457][T13870] attempt to access beyond end of device [ 476.160120][T13870] loop5: rw=2049, want=142, limit=63 [ 476.165634][T13870] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 476.174197][T13870] attempt to access beyond end of device [ 476.179857][T13870] loop5: rw=2049, want=143, limit=63 [ 476.185133][T13870] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 476.193655][T13870] attempt to access beyond end of device [ 476.199323][T13870] loop5: rw=2049, want=144, limit=63 [ 476.204607][T13870] attempt to access beyond end of device [ 476.210323][T13870] loop5: rw=2049, want=145, limit=63 [ 476.215684][T13870] attempt to access beyond end of device [ 476.221406][T13870] loop5: rw=2049, want=153, limit=63 17:46:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:06 executing program 2: 17:46:06 executing program 0: 17:46:06 executing program 3: 17:46:06 executing program 4: 17:46:06 executing program 1: 17:46:06 executing program 4: 17:46:06 executing program 1: 17:46:06 executing program 3: 17:46:06 executing program 0: 17:46:06 executing program 2: 17:46:06 executing program 4: [ 476.622538][ T27] audit: type=1804 audit(1581788766.424:211): pid=13896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/167/bus" dev="sda1" ino=17242 res=1 [ 476.667645][T13896] attempt to access beyond end of device [ 476.673538][T13896] loop5: rw=2049, want=78, limit=63 [ 476.688611][T13896] attempt to access beyond end of device [ 476.694258][T13896] loop5: rw=2049, want=79, limit=63 [ 476.750892][T13896] attempt to access beyond end of device [ 476.778584][T13896] loop5: rw=2049, want=80, limit=63 [ 476.784279][T13896] attempt to access beyond end of device [ 476.804313][T13896] loop5: rw=2049, want=81, limit=63 [ 476.838020][T13896] attempt to access beyond end of device [ 476.844823][T13896] loop5: rw=2049, want=130, limit=63 [ 476.860033][T13896] attempt to access beyond end of device [ 476.886314][T13896] loop5: rw=2049, want=131, limit=63 [ 476.898652][T13896] attempt to access beyond end of device [ 476.904361][T13896] loop5: rw=2049, want=132, limit=63 [ 476.925296][T13896] attempt to access beyond end of device [ 476.940577][T13896] loop5: rw=2049, want=133, limit=63 [ 476.946001][T13896] attempt to access beyond end of device [ 476.952072][T13896] loop5: rw=2049, want=142, limit=63 [ 476.957439][T13896] attempt to access beyond end of device [ 476.963483][T13896] loop5: rw=2049, want=143, limit=63 [ 476.969315][T13896] attempt to access beyond end of device [ 476.975018][T13896] loop5: rw=2049, want=144, limit=63 [ 476.980467][T13896] attempt to access beyond end of device [ 476.986140][T13896] loop5: rw=2049, want=145, limit=63 [ 476.991544][T13896] attempt to access beyond end of device [ 476.997180][T13896] loop5: rw=2049, want=153, limit=63 17:46:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:06 executing program 2: 17:46:06 executing program 1: 17:46:06 executing program 0: 17:46:06 executing program 3: 17:46:06 executing program 4: 17:46:07 executing program 2: 17:46:07 executing program 3: 17:46:07 executing program 1: 17:46:07 executing program 4: 17:46:07 executing program 0: [ 477.429777][ T27] audit: type=1804 audit(1581788767.224:212): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/168/bus" dev="sda1" ino=17248 res=1 [ 477.442228][T13925] attempt to access beyond end of device 17:46:07 executing program 0: [ 477.479321][T13925] loop5: rw=2049, want=78, limit=63 [ 477.484578][T13925] attempt to access beyond end of device [ 477.519639][T13925] loop5: rw=2049, want=79, limit=63 [ 477.571641][T13925] attempt to access beyond end of device [ 477.577342][T13925] loop5: rw=2049, want=80, limit=63 [ 477.628707][T13925] attempt to access beyond end of device [ 477.634460][T13925] loop5: rw=2049, want=81, limit=63 [ 477.661121][T13925] attempt to access beyond end of device [ 477.677192][T13925] loop5: rw=2049, want=130, limit=63 [ 477.701648][T13925] attempt to access beyond end of device [ 477.719495][T13925] loop5: rw=2049, want=131, limit=63 [ 477.724884][T13925] attempt to access beyond end of device [ 477.730755][T13925] loop5: rw=2049, want=132, limit=63 [ 477.736154][T13925] attempt to access beyond end of device [ 477.741870][T13925] loop5: rw=2049, want=133, limit=63 [ 477.747165][T13925] attempt to access beyond end of device [ 477.752937][T13925] loop5: rw=2049, want=142, limit=63 [ 477.758328][T13925] attempt to access beyond end of device [ 477.764079][T13925] loop5: rw=2049, want=143, limit=63 [ 477.769384][T13925] attempt to access beyond end of device [ 477.775110][T13925] loop5: rw=2049, want=144, limit=63 [ 477.780507][T13925] attempt to access beyond end of device [ 477.786240][T13925] loop5: rw=2049, want=145, limit=63 [ 477.791597][T13925] attempt to access beyond end of device [ 477.797223][T13925] loop5: rw=2049, want=153, limit=63 17:46:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, 0x0}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:07 executing program 3: 17:46:07 executing program 4: 17:46:07 executing program 1: 17:46:07 executing program 2: 17:46:07 executing program 0: 17:46:07 executing program 3: 17:46:07 executing program 4: 17:46:07 executing program 2: 17:46:07 executing program 0: 17:46:07 executing program 1: 17:46:07 executing program 3: [ 478.150956][ T27] audit: type=1804 audit(1581788767.954:213): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/169/bus" dev="sda1" ino=17239 res=1 [ 478.200458][T13947] attempt to access beyond end of device [ 478.289270][T13947] loop5: rw=2049, want=78, limit=63 [ 478.356919][T13947] attempt to access beyond end of device [ 478.421307][T13947] loop5: rw=2049, want=79, limit=63 [ 478.450084][T13947] attempt to access beyond end of device [ 478.469153][T13947] loop5: rw=2049, want=80, limit=63 [ 478.474409][T13947] attempt to access beyond end of device [ 478.482333][T13947] loop5: rw=2049, want=81, limit=63 [ 478.487724][T13947] attempt to access beyond end of device [ 478.493485][T13947] loop5: rw=2049, want=130, limit=63 [ 478.498880][T13947] attempt to access beyond end of device [ 478.504579][T13947] loop5: rw=2049, want=131, limit=63 [ 478.510027][T13947] attempt to access beyond end of device [ 478.515741][T13947] loop5: rw=2049, want=132, limit=63 [ 478.521223][T13947] attempt to access beyond end of device [ 478.527079][T13947] loop5: rw=2049, want=133, limit=63 [ 478.532533][T13947] attempt to access beyond end of device [ 478.538217][T13947] loop5: rw=2049, want=142, limit=63 [ 478.543865][T13947] attempt to access beyond end of device [ 478.549588][T13947] loop5: rw=2049, want=143, limit=63 [ 478.554940][T13947] attempt to access beyond end of device [ 478.560652][T13947] loop5: rw=2049, want=144, limit=63 [ 478.565948][T13947] attempt to access beyond end of device [ 478.571677][T13947] loop5: rw=2049, want=145, limit=63 [ 478.577077][T13947] attempt to access beyond end of device [ 478.582846][T13947] loop5: rw=2049, want=153, limit=63 17:46:08 executing program 1: 17:46:08 executing program 3: 17:46:08 executing program 4: 17:46:08 executing program 0: 17:46:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, 0x0}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:08 executing program 2: 17:46:08 executing program 2: 17:46:08 executing program 1: 17:46:08 executing program 3: 17:46:08 executing program 0: 17:46:08 executing program 4: [ 479.038019][ T27] audit: type=1804 audit(1581788768.834:214): pid=13980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/170/bus" dev="sda1" ino=17262 res=1 [ 479.046488][T13980] attempt to access beyond end of device [ 479.071152][T13980] loop5: rw=2049, want=78, limit=63 [ 479.076570][T13980] attempt to access beyond end of device [ 479.082498][T13980] loop5: rw=2049, want=79, limit=63 17:46:08 executing program 1: [ 479.087755][T13980] attempt to access beyond end of device [ 479.096748][T13980] loop5: rw=2049, want=80, limit=63 [ 479.102092][T13980] attempt to access beyond end of device [ 479.107852][T13980] loop5: rw=2049, want=81, limit=63 [ 479.115864][T13980] attempt to access beyond end of device [ 479.121653][T13980] loop5: rw=2049, want=130, limit=63 [ 479.127211][T13980] attempt to access beyond end of device [ 479.136004][T13980] loop5: rw=2049, want=131, limit=63 [ 479.141452][T13980] attempt to access beyond end of device [ 479.147149][T13980] loop5: rw=2049, want=132, limit=63 [ 479.152661][T13980] attempt to access beyond end of device [ 479.158348][T13980] loop5: rw=2049, want=133, limit=63 [ 479.163785][T13980] attempt to access beyond end of device [ 479.169782][T13980] loop5: rw=2049, want=142, limit=63 [ 479.175124][T13980] attempt to access beyond end of device [ 479.181307][T13980] loop5: rw=2049, want=143, limit=63 [ 479.186669][T13980] attempt to access beyond end of device [ 479.192656][T13980] loop5: rw=2049, want=144, limit=63 [ 479.198060][T13980] attempt to access beyond end of device [ 479.204014][T13980] loop5: rw=2049, want=145, limit=63 [ 479.227440][T13980] attempt to access beyond end of device [ 479.239167][T13980] loop5: rw=2049, want=153, limit=63 17:46:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, 0x0}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:09 executing program 2: 17:46:09 executing program 4: 17:46:09 executing program 3: 17:46:09 executing program 0: 17:46:09 executing program 1: 17:46:09 executing program 2: 17:46:09 executing program 3: 17:46:09 executing program 0: 17:46:09 executing program 1: 17:46:09 executing program 4: [ 479.687515][ T27] audit: type=1804 audit(1581788769.484:215): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/171/bus" dev="sda1" ino=17264 res=1 [ 479.745688][T14006] attempt to access beyond end of device [ 479.751483][T14006] loop5: rw=2049, want=78, limit=63 [ 479.756807][T14006] attempt to access beyond end of device [ 479.762875][T14006] loop5: rw=2049, want=79, limit=63 [ 479.769318][T14006] attempt to access beyond end of device [ 479.783048][T14006] loop5: rw=2049, want=80, limit=63 17:46:09 executing program 2: [ 479.793868][T14006] attempt to access beyond end of device [ 479.810611][T14006] loop5: rw=2049, want=81, limit=63 [ 479.816414][T14006] attempt to access beyond end of device [ 479.823188][T14006] loop5: rw=2049, want=130, limit=63 [ 479.830683][T14006] attempt to access beyond end of device [ 479.836413][T14006] loop5: rw=2049, want=131, limit=63 [ 479.843237][T14006] attempt to access beyond end of device [ 479.850995][T14006] loop5: rw=2049, want=132, limit=63 [ 479.856349][T14006] attempt to access beyond end of device [ 479.863320][T14006] loop5: rw=2049, want=133, limit=63 [ 479.870737][T14006] attempt to access beyond end of device [ 479.880942][T14006] loop5: rw=2049, want=142, limit=63 [ 479.886318][T14006] attempt to access beyond end of device [ 479.894698][T14006] loop5: rw=2049, want=143, limit=63 [ 479.901146][T14006] attempt to access beyond end of device [ 479.906847][T14006] loop5: rw=2049, want=144, limit=63 [ 479.914667][T14006] attempt to access beyond end of device [ 479.938776][T14006] loop5: rw=2049, want=145, limit=63 [ 479.952878][T14006] attempt to access beyond end of device [ 479.963593][T14006] loop5: rw=2049, want=153, limit=63 17:46:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:09 executing program 3: 17:46:09 executing program 1: 17:46:09 executing program 0: 17:46:09 executing program 4: 17:46:09 executing program 2: 17:46:10 executing program 3: 17:46:10 executing program 3: [ 480.333119][ T27] audit: type=1804 audit(1581788770.134:216): pid=14031 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/172/bus" dev="sda1" ino=17278 res=1 17:46:10 executing program 2: 17:46:10 executing program 4: 17:46:10 executing program 1: 17:46:10 executing program 0: [ 480.421342][T14031] attempt to access beyond end of device [ 480.454032][T14031] loop5: rw=2049, want=78, limit=63 [ 480.506741][T14031] attempt to access beyond end of device [ 480.558631][T14031] loop5: rw=2049, want=79, limit=63 [ 480.584103][T14031] attempt to access beyond end of device [ 480.607878][T14031] loop5: rw=2049, want=80, limit=63 [ 480.613232][T14031] attempt to access beyond end of device [ 480.629236][T14031] loop5: rw=2049, want=81, limit=63 [ 480.634530][T14031] attempt to access beyond end of device [ 480.648397][T14031] loop5: rw=2049, want=130, limit=63 [ 480.653792][T14031] attempt to access beyond end of device [ 480.659740][T14031] loop5: rw=2049, want=131, limit=63 [ 480.684784][T14031] attempt to access beyond end of device [ 480.690886][T14031] loop5: rw=2049, want=132, limit=63 [ 480.696231][T14031] attempt to access beyond end of device [ 480.704092][T14031] loop5: rw=2049, want=133, limit=63 [ 480.714031][T14031] attempt to access beyond end of device [ 480.719759][T14031] loop5: rw=2049, want=142, limit=63 [ 480.725135][T14031] attempt to access beyond end of device [ 480.769065][T14031] loop5: rw=2049, want=143, limit=63 [ 480.774393][T14031] attempt to access beyond end of device [ 480.780209][T14031] loop5: rw=2049, want=144, limit=63 [ 480.785509][T14031] attempt to access beyond end of device [ 480.791325][T14031] loop5: rw=2049, want=145, limit=63 [ 480.796660][T14031] attempt to access beyond end of device [ 480.802395][T14031] loop5: rw=2049, want=153, limit=63 17:46:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:10 executing program 3: 17:46:10 executing program 4: 17:46:10 executing program 2: 17:46:10 executing program 1: 17:46:10 executing program 0: 17:46:10 executing program 3: 17:46:10 executing program 1: 17:46:10 executing program 4: 17:46:10 executing program 0: 17:46:10 executing program 2: 17:46:11 executing program 3: [ 481.374781][ T27] audit: type=1804 audit(1581788771.174:217): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/173/bus" dev="sda1" ino=16491 res=1 [ 481.411641][T14068] attempt to access beyond end of device [ 481.432100][T14068] loop5: rw=2049, want=78, limit=63 [ 481.448929][T14068] buffer_io_error: 74 callbacks suppressed [ 481.448942][T14068] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 481.478497][T14068] attempt to access beyond end of device [ 481.484253][T14068] loop5: rw=2049, want=79, limit=63 [ 481.489664][T14068] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 481.498148][T14068] attempt to access beyond end of device [ 481.503865][T14068] loop5: rw=2049, want=80, limit=63 [ 481.521000][T14068] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 481.541502][T14068] attempt to access beyond end of device [ 481.547214][T14068] loop5: rw=2049, want=81, limit=63 [ 481.552541][T14068] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 481.563911][T14068] attempt to access beyond end of device [ 481.569641][T14068] loop5: rw=2049, want=130, limit=63 [ 481.597735][T14068] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 481.609297][T14068] attempt to access beyond end of device [ 481.614937][T14068] loop5: rw=2049, want=131, limit=63 [ 481.622358][T14068] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 481.631681][T14068] attempt to access beyond end of device [ 481.637305][T14068] loop5: rw=2049, want=132, limit=63 [ 481.644267][T14068] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 481.653579][T14068] attempt to access beyond end of device [ 481.659287][T14068] loop5: rw=2049, want=133, limit=63 [ 481.664605][T14068] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 481.673419][T14068] attempt to access beyond end of device [ 481.679090][T14068] loop5: rw=2049, want=142, limit=63 [ 481.684391][T14068] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 481.692931][T14068] attempt to access beyond end of device [ 481.698606][T14068] loop5: rw=2049, want=143, limit=63 [ 481.703904][T14068] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 481.712430][T14068] attempt to access beyond end of device [ 481.718061][T14068] loop5: rw=2049, want=144, limit=63 [ 481.723372][T14068] attempt to access beyond end of device [ 481.729758][T14068] loop5: rw=2049, want=145, limit=63 [ 481.735121][T14068] attempt to access beyond end of device [ 481.740795][T14068] loop5: rw=2049, want=153, limit=63 17:46:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0x0, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:11 executing program 4: 17:46:11 executing program 1: 17:46:11 executing program 2: 17:46:11 executing program 0: 17:46:11 executing program 3: 17:46:11 executing program 3: 17:46:11 executing program 0: 17:46:11 executing program 1: 17:46:11 executing program 4: 17:46:11 executing program 2: 17:46:12 executing program 2: [ 482.185264][ T27] audit: type=1804 audit(1581788771.984:218): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/174/bus" dev="sda1" ino=17292 res=1 17:46:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:12 executing program 3: 17:46:12 executing program 2: 17:46:12 executing program 0: 17:46:12 executing program 1: 17:46:12 executing program 4: 17:46:12 executing program 3: 17:46:12 executing program 2: 17:46:12 executing program 1: 17:46:12 executing program 4: 17:46:12 executing program 0: [ 482.706947][ T27] audit: type=1804 audit(1581788772.504:219): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/175/bus" dev="sda1" ino=16483 res=1 [ 482.747068][T14113] attempt to access beyond end of device [ 482.755683][T14113] loop5: rw=2049, want=78, limit=63 [ 482.761265][T14113] attempt to access beyond end of device [ 482.766984][T14113] loop5: rw=2049, want=79, limit=63 [ 482.775406][T14113] attempt to access beyond end of device [ 482.781381][T14113] loop5: rw=2049, want=80, limit=63 [ 482.786639][T14113] attempt to access beyond end of device [ 482.795119][T14113] loop5: rw=2049, want=81, limit=63 17:46:12 executing program 2: [ 482.851949][T14113] attempt to access beyond end of device [ 482.885050][T14113] loop5: rw=2049, want=130, limit=63 [ 482.942104][T14113] attempt to access beyond end of device [ 482.953833][T14113] loop5: rw=2049, want=131, limit=63 [ 482.959877][T14113] attempt to access beyond end of device [ 482.966178][T14113] loop5: rw=2049, want=132, limit=63 [ 482.971862][T14113] attempt to access beyond end of device [ 482.977565][T14113] loop5: rw=2049, want=133, limit=63 [ 482.983191][T14113] attempt to access beyond end of device [ 482.989334][T14113] loop5: rw=2049, want=142, limit=63 [ 483.042353][T14113] attempt to access beyond end of device [ 483.061015][T14113] loop5: rw=2049, want=143, limit=63 [ 483.066411][T14113] attempt to access beyond end of device [ 483.088043][T14113] loop5: rw=2049, want=144, limit=63 [ 483.094470][T14113] attempt to access beyond end of device [ 483.100681][T14113] loop5: rw=2049, want=145, limit=63 [ 483.106077][T14113] attempt to access beyond end of device [ 483.115210][T14113] loop5: rw=2049, want=153, limit=63 17:46:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:13 executing program 1: 17:46:13 executing program 3: 17:46:13 executing program 4: 17:46:13 executing program 0: 17:46:13 executing program 2: 17:46:13 executing program 1: 17:46:13 executing program 2: 17:46:13 executing program 0: 17:46:13 executing program 3: 17:46:13 executing program 4: [ 483.449840][ T27] audit: type=1804 audit(1581788773.254:220): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/176/bus" dev="sda1" ino=17290 res=1 [ 483.483032][T14142] attempt to access beyond end of device [ 483.488776][T14142] loop5: rw=2049, want=78, limit=63 [ 483.494046][T14142] attempt to access beyond end of device [ 483.499785][T14142] loop5: rw=2049, want=79, limit=63 [ 483.505262][T14142] attempt to access beyond end of device [ 483.512185][T14142] loop5: rw=2049, want=80, limit=63 [ 483.527253][T14142] attempt to access beyond end of device [ 483.538637][T14142] loop5: rw=2049, want=81, limit=63 [ 483.548611][T14142] attempt to access beyond end of device 17:46:13 executing program 0: [ 483.618635][T14142] loop5: rw=2049, want=130, limit=63 [ 483.629260][T14142] attempt to access beyond end of device [ 483.680051][T14142] loop5: rw=2049, want=131, limit=63 [ 483.718605][T14142] attempt to access beyond end of device [ 483.754103][T14142] loop5: rw=2049, want=132, limit=63 [ 483.783529][T14142] attempt to access beyond end of device [ 483.807826][T14142] loop5: rw=2049, want=133, limit=63 [ 483.824100][T14142] attempt to access beyond end of device [ 483.830595][T14142] loop5: rw=2049, want=142, limit=63 [ 483.836402][T14142] attempt to access beyond end of device [ 483.842159][T14142] loop5: rw=2049, want=143, limit=63 [ 483.847532][T14142] attempt to access beyond end of device [ 483.896350][T14142] loop5: rw=2049, want=144, limit=63 [ 483.917321][T14142] attempt to access beyond end of device [ 483.923106][T14142] loop5: rw=2049, want=145, limit=63 [ 483.928413][T14142] attempt to access beyond end of device [ 483.935457][T14142] loop5: rw=2049, want=153, limit=63 [ 483.979045][ T0] NOHZ: local_softirq_pending 08 17:46:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:13 executing program 1: 17:46:13 executing program 3: 17:46:13 executing program 2: 17:46:13 executing program 4: 17:46:13 executing program 0: 17:46:13 executing program 0: 17:46:13 executing program 2: 17:46:13 executing program 4: 17:46:14 executing program 1: 17:46:14 executing program 3: 17:46:14 executing program 0: [ 484.356943][ T27] audit: type=1804 audit(1581788774.154:221): pid=14176 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/177/bus" dev="sda1" ino=17314 res=1 [ 484.378756][T14176] attempt to access beyond end of device [ 484.387127][T14176] loop5: rw=2049, want=78, limit=63 [ 484.393314][T14176] attempt to access beyond end of device [ 484.399603][T14176] loop5: rw=2049, want=79, limit=63 [ 484.404941][T14176] attempt to access beyond end of device [ 484.411054][T14176] loop5: rw=2049, want=80, limit=63 [ 484.416271][T14176] attempt to access beyond end of device [ 484.422268][T14176] loop5: rw=2049, want=81, limit=63 [ 484.427808][T14176] attempt to access beyond end of device [ 484.436446][T14176] loop5: rw=2049, want=130, limit=63 [ 484.442233][T14176] attempt to access beyond end of device [ 484.447922][T14176] loop5: rw=2049, want=131, limit=63 [ 484.453632][T14176] attempt to access beyond end of device [ 484.459550][T14176] loop5: rw=2049, want=132, limit=63 [ 484.480595][T14176] attempt to access beyond end of device [ 484.492926][T14176] loop5: rw=2049, want=133, limit=63 [ 484.520010][T14176] attempt to access beyond end of device [ 484.526842][T14176] loop5: rw=2049, want=142, limit=63 [ 484.535517][T14176] attempt to access beyond end of device [ 484.541749][T14176] loop5: rw=2049, want=143, limit=63 [ 484.547314][T14176] attempt to access beyond end of device [ 484.553384][T14176] loop5: rw=2049, want=144, limit=63 [ 484.559015][T14176] attempt to access beyond end of device [ 484.569130][T14176] loop5: rw=2049, want=145, limit=63 [ 484.577897][T14176] attempt to access beyond end of device [ 484.615789][T14176] loop5: rw=2049, want=153, limit=63 17:46:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:14 executing program 1: 17:46:14 executing program 4: 17:46:14 executing program 2: 17:46:14 executing program 3: 17:46:14 executing program 0: 17:46:14 executing program 4: 17:46:14 executing program 2: 17:46:14 executing program 3: 17:46:14 executing program 0: 17:46:14 executing program 1: [ 485.107136][ T27] audit: type=1804 audit(1581788774.904:222): pid=14200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/178/bus" dev="sda1" ino=17315 res=1 17:46:14 executing program 2: [ 485.152439][T14200] attempt to access beyond end of device [ 485.168603][T14200] loop5: rw=2049, want=78, limit=63 [ 485.208975][T14200] attempt to access beyond end of device [ 485.290676][T14200] loop5: rw=2049, want=79, limit=63 [ 485.307694][T14200] attempt to access beyond end of device [ 485.314501][T14200] loop5: rw=2049, want=80, limit=63 [ 485.329026][T14200] attempt to access beyond end of device [ 485.344899][T14200] loop5: rw=2049, want=81, limit=63 [ 485.350574][T14200] attempt to access beyond end of device [ 485.356366][T14200] loop5: rw=2049, want=130, limit=63 [ 485.362190][T14200] attempt to access beyond end of device [ 485.376652][T14200] loop5: rw=2049, want=131, limit=63 [ 485.382195][T14200] attempt to access beyond end of device [ 485.387894][T14200] loop5: rw=2049, want=132, limit=63 [ 485.393262][T14200] attempt to access beyond end of device [ 485.398943][T14200] loop5: rw=2049, want=133, limit=63 [ 485.404271][T14200] attempt to access beyond end of device [ 485.409989][T14200] loop5: rw=2049, want=142, limit=63 [ 485.415334][T14200] attempt to access beyond end of device [ 485.421110][T14200] loop5: rw=2049, want=143, limit=63 [ 485.426395][T14200] attempt to access beyond end of device [ 485.432114][T14200] loop5: rw=2049, want=144, limit=63 [ 485.437399][T14200] attempt to access beyond end of device [ 485.443083][T14200] loop5: rw=2049, want=145, limit=63 [ 485.448399][T14200] attempt to access beyond end of device [ 485.454050][T14200] loop5: rw=2049, want=153, limit=63 17:46:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:15 executing program 1: 17:46:15 executing program 0: 17:46:15 executing program 3: 17:46:15 executing program 4: 17:46:15 executing program 2: 17:46:15 executing program 0: 17:46:15 executing program 3: 17:46:15 executing program 1: 17:46:15 executing program 4: 17:46:15 executing program 2: [ 485.825427][ T27] audit: type=1804 audit(1581788775.624:223): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/179/bus" dev="sda1" ino=17312 res=1 [ 485.833086][T14226] attempt to access beyond end of device 17:46:15 executing program 4: [ 485.878872][T14226] loop5: rw=2049, want=78, limit=63 [ 485.968733][T14226] attempt to access beyond end of device [ 486.009745][T14226] loop5: rw=2049, want=79, limit=63 [ 486.044577][T14226] attempt to access beyond end of device [ 486.099469][T14226] loop5: rw=2049, want=80, limit=63 [ 486.147681][T14226] attempt to access beyond end of device [ 486.155993][T14226] loop5: rw=2049, want=81, limit=63 [ 486.161639][T14226] attempt to access beyond end of device [ 486.167276][T14226] loop5: rw=2049, want=130, limit=63 [ 486.191576][T14226] attempt to access beyond end of device [ 486.197236][T14226] loop5: rw=2049, want=131, limit=63 [ 486.202859][T14226] attempt to access beyond end of device [ 486.208830][T14226] loop5: rw=2049, want=132, limit=63 [ 486.214129][T14226] attempt to access beyond end of device [ 486.219885][T14226] loop5: rw=2049, want=133, limit=63 [ 486.225188][T14226] attempt to access beyond end of device [ 486.230870][T14226] loop5: rw=2049, want=142, limit=63 [ 486.236328][T14226] attempt to access beyond end of device [ 486.242091][T14226] loop5: rw=2049, want=143, limit=63 [ 486.247426][T14226] attempt to access beyond end of device [ 486.253105][T14226] loop5: rw=2049, want=144, limit=63 [ 486.258455][T14226] attempt to access beyond end of device [ 486.264126][T14226] loop5: rw=2049, want=145, limit=63 [ 486.269455][T14226] attempt to access beyond end of device [ 486.275069][T14226] loop5: rw=2049, want=153, limit=63 17:46:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:16 executing program 3: 17:46:16 executing program 2: 17:46:16 executing program 0: 17:46:16 executing program 4: 17:46:16 executing program 1: 17:46:16 executing program 1: 17:46:16 executing program 4: 17:46:16 executing program 3: 17:46:16 executing program 2: 17:46:16 executing program 0: [ 486.615137][ T27] audit: type=1804 audit(1581788776.414:224): pid=14256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/180/bus" dev="sda1" ino=17312 res=1 [ 486.632083][T14256] attempt to access beyond end of device [ 486.645963][T14256] loop5: rw=2049, want=78, limit=63 [ 486.658824][T14256] buffer_io_error: 62 callbacks suppressed [ 486.658838][T14256] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 486.700743][T14256] attempt to access beyond end of device [ 486.715218][T14256] loop5: rw=2049, want=79, limit=63 [ 486.726092][T14256] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 486.743309][T14256] attempt to access beyond end of device [ 486.755627][T14256] loop5: rw=2049, want=80, limit=63 17:46:16 executing program 0: [ 486.763985][T14256] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 486.788723][T14256] attempt to access beyond end of device [ 486.794430][T14256] loop5: rw=2049, want=81, limit=63 [ 486.803428][T14256] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 486.838165][T14256] attempt to access beyond end of device [ 486.848636][T14256] loop5: rw=2049, want=130, limit=63 [ 486.858705][T14256] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 486.876131][T14256] attempt to access beyond end of device [ 486.891341][T14256] loop5: rw=2049, want=131, limit=63 [ 486.918619][T14256] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 486.951279][T14256] attempt to access beyond end of device [ 486.957336][T14256] loop5: rw=2049, want=132, limit=63 [ 486.965291][T14256] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 486.973992][T14256] attempt to access beyond end of device [ 486.979987][T14256] loop5: rw=2049, want=133, limit=63 [ 486.988656][T14256] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 487.032913][T14256] attempt to access beyond end of device [ 487.038742][T14256] loop5: rw=2049, want=142, limit=63 [ 487.044097][T14256] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 487.052773][T14256] attempt to access beyond end of device [ 487.058455][T14256] loop5: rw=2049, want=143, limit=63 [ 487.063967][T14256] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 487.072599][T14256] attempt to access beyond end of device [ 487.078237][T14256] loop5: rw=2049, want=144, limit=63 [ 487.083584][T14256] attempt to access beyond end of device [ 487.089230][T14256] loop5: rw=2049, want=145, limit=63 [ 487.094530][T14256] attempt to access beyond end of device [ 487.100216][T14256] loop5: rw=2049, want=153, limit=63 17:46:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:17 executing program 4: 17:46:17 executing program 1: 17:46:17 executing program 0: 17:46:17 executing program 2: 17:46:17 executing program 3: 17:46:17 executing program 0: 17:46:17 executing program 3: 17:46:17 executing program 1: 17:46:17 executing program 4: 17:46:17 executing program 2: 17:46:17 executing program 0: [ 487.539165][ T27] audit: type=1804 audit(1581788777.344:225): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/181/bus" dev="sda1" ino=17345 res=1 [ 487.559477][T14287] attempt to access beyond end of device [ 487.569605][T14287] loop5: rw=2049, want=78, limit=63 [ 487.574912][T14287] attempt to access beyond end of device [ 487.588620][T14287] loop5: rw=2049, want=79, limit=63 [ 487.593883][T14287] attempt to access beyond end of device [ 487.603070][T14287] loop5: rw=2049, want=80, limit=63 [ 487.608935][T14287] attempt to access beyond end of device [ 487.617016][T14287] loop5: rw=2049, want=81, limit=63 [ 487.623527][T14287] attempt to access beyond end of device [ 487.629439][T14287] loop5: rw=2049, want=130, limit=63 [ 487.634853][T14287] attempt to access beyond end of device [ 487.640876][T14287] loop5: rw=2049, want=131, limit=63 [ 487.646451][T14287] attempt to access beyond end of device [ 487.652388][T14287] loop5: rw=2049, want=132, limit=63 [ 487.657726][T14287] attempt to access beyond end of device [ 487.663914][T14287] loop5: rw=2049, want=133, limit=63 [ 487.669453][T14287] attempt to access beyond end of device [ 487.675131][T14287] loop5: rw=2049, want=142, limit=63 [ 487.680870][T14287] attempt to access beyond end of device [ 487.686566][T14287] loop5: rw=2049, want=143, limit=63 [ 487.692219][T14287] attempt to access beyond end of device [ 487.697914][T14287] loop5: rw=2049, want=144, limit=63 [ 487.718659][T14287] attempt to access beyond end of device [ 487.724499][T14287] loop5: rw=2049, want=145, limit=63 [ 487.738655][T14287] attempt to access beyond end of device [ 487.748888][T14287] loop5: rw=2049, want=153, limit=63 17:46:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:17 executing program 3: 17:46:17 executing program 1: 17:46:17 executing program 2: 17:46:17 executing program 4: 17:46:17 executing program 0: 17:46:17 executing program 0: 17:46:17 executing program 3: 17:46:17 executing program 4: 17:46:17 executing program 1: 17:46:17 executing program 2: 17:46:18 executing program 4: [ 488.184311][ T27] audit: type=1804 audit(1581788777.984:226): pid=14314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/182/bus" dev="sda1" ino=17344 res=1 [ 488.203583][T14314] attempt to access beyond end of device [ 488.226465][T14314] loop5: rw=2049, want=78, limit=63 [ 488.241305][T14314] attempt to access beyond end of device [ 488.274115][T14314] loop5: rw=2049, want=79, limit=63 [ 488.314220][T14314] attempt to access beyond end of device [ 488.344358][T14314] loop5: rw=2049, want=80, limit=63 [ 488.360829][T14314] attempt to access beyond end of device [ 488.379935][T14314] loop5: rw=2049, want=81, limit=63 [ 488.399728][T14314] attempt to access beyond end of device [ 488.412551][T14314] loop5: rw=2049, want=130, limit=63 [ 488.435060][T14314] attempt to access beyond end of device [ 488.471247][T14314] loop5: rw=2049, want=131, limit=63 [ 488.476707][T14314] attempt to access beyond end of device [ 488.505452][T14314] loop5: rw=2049, want=132, limit=63 [ 488.511037][T14314] attempt to access beyond end of device [ 488.516791][T14314] loop5: rw=2049, want=133, limit=63 [ 488.525064][T14314] attempt to access beyond end of device [ 488.531044][T14314] loop5: rw=2049, want=142, limit=63 [ 488.546677][T14314] attempt to access beyond end of device [ 488.552974][T14314] loop5: rw=2049, want=143, limit=63 [ 488.558868][T14314] attempt to access beyond end of device [ 488.564541][T14314] loop5: rw=2049, want=144, limit=63 [ 488.569985][T14314] attempt to access beyond end of device [ 488.575616][T14314] loop5: rw=2049, want=145, limit=63 [ 488.581013][T14314] attempt to access beyond end of device [ 488.586748][T14314] loop5: rw=2049, want=153, limit=63 17:46:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:18 executing program 0: 17:46:18 executing program 1: 17:46:18 executing program 2: 17:46:18 executing program 3: 17:46:18 executing program 4: 17:46:18 executing program 1: 17:46:18 executing program 4: 17:46:18 executing program 3: 17:46:18 executing program 2: 17:46:18 executing program 0: [ 488.907707][ T27] audit: type=1804 audit(1581788778.704:227): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/183/bus" dev="sda1" ino=17325 res=1 [ 488.964322][T14338] attempt to access beyond end of device 17:46:18 executing program 4: [ 489.066633][T14338] loop5: rw=2049, want=78, limit=63 [ 489.130916][T14338] attempt to access beyond end of device [ 489.136659][T14338] loop5: rw=2049, want=79, limit=63 [ 489.188638][T14338] attempt to access beyond end of device [ 489.202421][T14338] loop5: rw=2049, want=80, limit=63 [ 489.230884][T14338] attempt to access beyond end of device [ 489.264076][T14338] loop5: rw=2049, want=81, limit=63 [ 489.272130][T14338] attempt to access beyond end of device [ 489.313313][T14338] loop5: rw=2049, want=130, limit=63 [ 489.323847][T14338] attempt to access beyond end of device [ 489.342612][T14338] loop5: rw=2049, want=131, limit=63 [ 489.348105][T14338] attempt to access beyond end of device [ 489.354665][T14338] loop5: rw=2049, want=132, limit=63 [ 489.360107][T14338] attempt to access beyond end of device [ 489.365728][T14338] loop5: rw=2049, want=133, limit=63 [ 489.371112][T14338] attempt to access beyond end of device [ 489.376738][T14338] loop5: rw=2049, want=142, limit=63 [ 489.382060][T14338] attempt to access beyond end of device [ 489.387687][T14338] loop5: rw=2049, want=143, limit=63 [ 489.392986][T14338] attempt to access beyond end of device [ 489.398655][T14338] loop5: rw=2049, want=144, limit=63 [ 489.403928][T14338] attempt to access beyond end of device [ 489.409600][T14338] loop5: rw=2049, want=145, limit=63 [ 489.414910][T14338] attempt to access beyond end of device [ 489.420574][T14338] loop5: rw=2049, want=153, limit=63 17:46:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:19 executing program 1: 17:46:19 executing program 4: 17:46:19 executing program 2: 17:46:19 executing program 0: 17:46:19 executing program 3: 17:46:19 executing program 2: 17:46:19 executing program 4: 17:46:19 executing program 3: 17:46:19 executing program 0: 17:46:19 executing program 3: 17:46:19 executing program 1: [ 490.020568][T14364] attempt to access beyond end of device [ 490.026254][T14364] loop5: rw=2049, want=78, limit=63 [ 490.093913][T14364] attempt to access beyond end of device [ 490.100044][T14364] loop5: rw=2049, want=79, limit=63 [ 490.105300][T14364] attempt to access beyond end of device [ 490.126180][T14364] loop5: rw=2049, want=80, limit=63 [ 490.131681][T14364] attempt to access beyond end of device [ 490.146471][T14364] loop5: rw=2049, want=81, limit=63 [ 490.152021][T14364] attempt to access beyond end of device [ 490.157675][T14364] loop5: rw=2049, want=130, limit=63 [ 490.163053][T14364] attempt to access beyond end of device [ 490.168727][T14364] loop5: rw=2049, want=131, limit=63 [ 490.174025][T14364] attempt to access beyond end of device [ 490.179730][T14364] loop5: rw=2049, want=132, limit=63 [ 490.185013][T14364] attempt to access beyond end of device [ 490.190666][T14364] loop5: rw=2049, want=133, limit=63 [ 490.196049][T14364] attempt to access beyond end of device [ 490.202403][T14364] loop5: rw=2049, want=142, limit=63 [ 490.207679][T14364] attempt to access beyond end of device [ 490.213345][T14364] loop5: rw=2049, want=143, limit=63 [ 490.218694][T14364] attempt to access beyond end of device [ 490.224314][T14364] loop5: rw=2049, want=144, limit=63 [ 490.229655][T14364] attempt to access beyond end of device [ 490.235313][T14364] loop5: rw=2049, want=145, limit=63 [ 490.240659][T14364] attempt to access beyond end of device [ 490.246289][T14364] loop5: rw=2049, want=153, limit=63 17:46:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:20 executing program 3: 17:46:20 executing program 0: 17:46:20 executing program 1: 17:46:20 executing program 4: 17:46:20 executing program 2: 17:46:20 executing program 2: 17:46:20 executing program 1: 17:46:20 executing program 4: 17:46:20 executing program 0: 17:46:20 executing program 3: [ 490.684480][ T27] audit: type=1804 audit(1581788780.484:228): pid=14396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/185/bus" dev="sda1" ino=17370 res=1 [ 490.719506][T14396] attempt to access beyond end of device 17:46:20 executing program 3: [ 490.744620][T14396] loop5: rw=2049, want=78, limit=63 [ 490.763223][T14396] attempt to access beyond end of device [ 490.776495][T14396] loop5: rw=2049, want=79, limit=63 [ 490.838693][T14396] attempt to access beyond end of device [ 490.871093][T14396] loop5: rw=2049, want=80, limit=63 [ 490.925204][T14396] attempt to access beyond end of device [ 490.933816][T14396] loop5: rw=2049, want=81, limit=63 [ 490.939150][T14396] attempt to access beyond end of device [ 490.944821][T14396] loop5: rw=2049, want=130, limit=63 [ 490.950294][T14396] attempt to access beyond end of device [ 490.955969][T14396] loop5: rw=2049, want=131, limit=63 [ 490.961346][T14396] attempt to access beyond end of device [ 490.967279][T14396] loop5: rw=2049, want=132, limit=63 [ 490.973209][T14396] attempt to access beyond end of device [ 490.978884][T14396] loop5: rw=2049, want=133, limit=63 [ 490.984161][T14396] attempt to access beyond end of device [ 490.989940][T14396] loop5: rw=2049, want=142, limit=63 [ 490.995223][T14396] attempt to access beyond end of device [ 491.000891][T14396] loop5: rw=2049, want=143, limit=63 [ 491.006177][T14396] attempt to access beyond end of device [ 491.011844][T14396] loop5: rw=2049, want=144, limit=63 [ 491.017123][T14396] attempt to access beyond end of device [ 491.022817][T14396] loop5: rw=2049, want=145, limit=63 [ 491.028121][T14396] attempt to access beyond end of device [ 491.033790][T14396] loop5: rw=2049, want=153, limit=63 17:46:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:20 executing program 0: 17:46:20 executing program 4: 17:46:20 executing program 2: 17:46:20 executing program 1: 17:46:20 executing program 3: 17:46:21 executing program 0: 17:46:21 executing program 2: 17:46:21 executing program 4: 17:46:21 executing program 1: 17:46:21 executing program 3: 17:46:21 executing program 2: [ 491.486446][ T27] audit: type=1804 audit(1581788781.284:229): pid=14432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/186/bus" dev="sda1" ino=17371 res=1 17:46:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:21 executing program 3: 17:46:21 executing program 0: 17:46:21 executing program 4: 17:46:21 executing program 2: 17:46:21 executing program 1: 17:46:21 executing program 1: 17:46:21 executing program 0: 17:46:21 executing program 2: 17:46:21 executing program 4: 17:46:21 executing program 3: 17:46:21 executing program 2: [ 492.139295][ T27] audit: type=1804 audit(1581788781.944:230): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/187/bus" dev="sda1" ino=17365 res=1 17:46:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:22 executing program 1: 17:46:22 executing program 0: 17:46:22 executing program 3: 17:46:22 executing program 4: 17:46:22 executing program 2: 17:46:22 executing program 3: 17:46:22 executing program 2: 17:46:22 executing program 1: 17:46:22 executing program 0: 17:46:22 executing program 4: 17:46:22 executing program 1: [ 492.761832][ T27] audit: type=1804 audit(1581788782.564:231): pid=14480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/188/bus" dev="sda1" ino=17383 res=1 17:46:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:22 executing program 2: 17:46:22 executing program 1: 17:46:22 executing program 4: 17:46:22 executing program 0: 17:46:22 executing program 3: 17:46:22 executing program 2: 17:46:22 executing program 3: 17:46:22 executing program 4: 17:46:22 executing program 1: 17:46:23 executing program 0: 17:46:23 executing program 2: [ 493.334764][ T27] audit: type=1804 audit(1581788783.134:232): pid=14507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/189/bus" dev="sda1" ino=16833 res=1 [ 493.449451][T14507] attempt to access beyond end of device [ 493.496586][T14507] loop5: rw=2049, want=78, limit=63 [ 493.509928][T14507] buffer_io_error: 62 callbacks suppressed [ 493.509999][T14507] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 493.548022][T14507] attempt to access beyond end of device [ 493.569440][T14507] loop5: rw=2049, want=79, limit=63 [ 493.581338][T14507] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 493.591698][T14507] attempt to access beyond end of device [ 493.597456][T14507] loop5: rw=2049, want=80, limit=63 [ 493.603128][T14507] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 493.611828][T14507] attempt to access beyond end of device [ 493.617471][T14507] loop5: rw=2049, want=81, limit=63 [ 493.623485][T14507] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 493.631957][T14507] attempt to access beyond end of device [ 493.637583][T14507] loop5: rw=2049, want=130, limit=63 [ 493.642898][T14507] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 493.651430][T14507] attempt to access beyond end of device [ 493.657078][T14507] loop5: rw=2049, want=131, limit=63 [ 493.662380][T14507] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 493.670909][T14507] attempt to access beyond end of device [ 493.676529][T14507] loop5: rw=2049, want=132, limit=63 [ 493.681822][T14507] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 493.690619][T14507] attempt to access beyond end of device [ 493.696237][T14507] loop5: rw=2049, want=133, limit=63 [ 493.701605][T14507] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 493.710206][T14507] attempt to access beyond end of device [ 493.715826][T14507] loop5: rw=2049, want=142, limit=63 [ 493.721144][T14507] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 493.730426][T14507] attempt to access beyond end of device [ 493.736082][T14507] loop5: rw=2049, want=143, limit=63 [ 493.741441][T14507] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 493.749960][T14507] attempt to access beyond end of device [ 493.755580][T14507] loop5: rw=2049, want=144, limit=63 [ 493.760883][T14507] attempt to access beyond end of device [ 493.766511][T14507] loop5: rw=2049, want=145, limit=63 [ 493.771964][T14507] attempt to access beyond end of device [ 493.777591][T14507] loop5: rw=2049, want=153, limit=63 17:46:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x0, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:23 executing program 3: 17:46:23 executing program 0: 17:46:23 executing program 4: 17:46:23 executing program 1: 17:46:23 executing program 2: 17:46:23 executing program 3: 17:46:23 executing program 0: 17:46:23 executing program 4: 17:46:23 executing program 1: 17:46:23 executing program 2: 17:46:23 executing program 0: [ 494.165629][ T27] audit: type=1804 audit(1581788783.964:233): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/190/bus" dev="sda1" ino=16593 res=1 [ 494.305010][T14534] attempt to access beyond end of device [ 494.321835][T14534] loop5: rw=2049, want=78, limit=63 [ 494.343883][T14534] attempt to access beyond end of device [ 494.368486][T14534] loop5: rw=2049, want=79, limit=63 [ 494.404732][T14534] attempt to access beyond end of device [ 494.428501][T14534] loop5: rw=2049, want=80, limit=63 [ 494.453086][T14534] attempt to access beyond end of device [ 494.467430][T14534] loop5: rw=2049, want=81, limit=63 [ 494.473055][T14534] attempt to access beyond end of device [ 494.493796][T14534] loop5: rw=2049, want=130, limit=63 [ 494.499520][T14534] attempt to access beyond end of device [ 494.505318][T14534] loop5: rw=2049, want=131, limit=63 [ 494.510912][T14534] attempt to access beyond end of device [ 494.516692][T14534] loop5: rw=2049, want=132, limit=63 [ 494.522360][T14534] attempt to access beyond end of device [ 494.528516][T14534] loop5: rw=2049, want=133, limit=63 [ 494.534812][T14534] attempt to access beyond end of device [ 494.541261][T14534] loop5: rw=2049, want=142, limit=63 [ 494.546586][T14534] attempt to access beyond end of device [ 494.552284][T14534] loop5: rw=2049, want=143, limit=63 [ 494.557569][T14534] attempt to access beyond end of device [ 494.563296][T14534] loop5: rw=2049, want=144, limit=63 [ 494.568628][T14534] attempt to access beyond end of device [ 494.574248][T14534] loop5: rw=2049, want=145, limit=63 [ 494.579698][T14534] attempt to access beyond end of device [ 494.585331][T14534] loop5: rw=2049, want=153, limit=63 17:46:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x0, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:24 executing program 4: 17:46:24 executing program 3: 17:46:24 executing program 2: 17:46:24 executing program 1: 17:46:24 executing program 0: 17:46:24 executing program 2: 17:46:24 executing program 0: 17:46:24 executing program 3: 17:46:24 executing program 4: 17:46:24 executing program 1: [ 494.994750][ T27] audit: type=1804 audit(1581788784.794:234): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/191/bus" dev="sda1" ino=17025 res=1 17:46:24 executing program 1: [ 495.039215][T14566] attempt to access beyond end of device [ 495.050379][T14566] loop5: rw=2049, want=78, limit=63 [ 495.061097][T14566] attempt to access beyond end of device [ 495.069840][T14566] loop5: rw=2049, want=79, limit=63 [ 495.075650][T14566] attempt to access beyond end of device [ 495.082748][T14566] loop5: rw=2049, want=80, limit=63 [ 495.088180][T14566] attempt to access beyond end of device [ 495.096370][T14566] loop5: rw=2049, want=81, limit=63 [ 495.101992][T14566] attempt to access beyond end of device [ 495.107769][T14566] loop5: rw=2049, want=130, limit=63 [ 495.113319][T14566] attempt to access beyond end of device [ 495.119204][T14566] loop5: rw=2049, want=131, limit=63 [ 495.124659][T14566] attempt to access beyond end of device [ 495.130604][T14566] loop5: rw=2049, want=132, limit=63 [ 495.135942][T14566] attempt to access beyond end of device [ 495.142177][T14566] loop5: rw=2049, want=133, limit=63 [ 495.147556][T14566] attempt to access beyond end of device [ 495.153816][T14566] loop5: rw=2049, want=142, limit=63 [ 495.159500][T14566] attempt to access beyond end of device [ 495.165196][T14566] loop5: rw=2049, want=143, limit=63 [ 495.170804][T14566] attempt to access beyond end of device [ 495.176485][T14566] loop5: rw=2049, want=144, limit=63 [ 495.182133][T14566] attempt to access beyond end of device [ 495.187987][T14566] loop5: rw=2049, want=145, limit=63 [ 495.194677][T14566] attempt to access beyond end of device [ 495.200593][T14566] loop5: rw=2049, want=153, limit=63 17:46:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x0, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:25 executing program 2: 17:46:25 executing program 0: 17:46:25 executing program 3: 17:46:25 executing program 4: 17:46:25 executing program 1: 17:46:25 executing program 0: 17:46:25 executing program 3: 17:46:25 executing program 4: 17:46:25 executing program 1: 17:46:25 executing program 2: 17:46:25 executing program 3: [ 495.662089][ T27] audit: type=1804 audit(1581788785.464:235): pid=14594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/192/bus" dev="sda1" ino=17137 res=1 17:46:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:25 executing program 0: 17:46:25 executing program 2: 17:46:25 executing program 3: 17:46:25 executing program 1: 17:46:25 executing program 4: 17:46:25 executing program 0: 17:46:25 executing program 3: 17:46:25 executing program 1: 17:46:25 executing program 4: 17:46:25 executing program 2: 17:46:26 executing program 0: [ 496.279589][ T27] audit: type=1804 audit(1581788786.084:236): pid=14624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/193/bus" dev="sda1" ino=16513 res=1 [ 496.337789][T14624] attempt to access beyond end of device [ 496.377049][T14624] loop5: rw=2049, want=78, limit=63 [ 496.388484][T14624] attempt to access beyond end of device [ 496.394551][T14624] loop5: rw=2049, want=79, limit=63 [ 496.400177][T14624] attempt to access beyond end of device [ 496.408931][T14624] loop5: rw=2049, want=80, limit=63 [ 496.430421][T14624] attempt to access beyond end of device [ 496.436351][T14624] loop5: rw=2049, want=81, limit=63 [ 496.444121][T14624] attempt to access beyond end of device [ 496.456613][T14624] loop5: rw=2049, want=130, limit=63 [ 496.468639][T14624] attempt to access beyond end of device [ 496.474379][T14624] loop5: rw=2049, want=131, limit=63 [ 496.482628][T14624] attempt to access beyond end of device [ 496.488316][T14624] loop5: rw=2049, want=132, limit=63 [ 496.493915][T14624] attempt to access beyond end of device [ 496.502546][T14624] loop5: rw=2049, want=133, limit=63 [ 496.507896][T14624] attempt to access beyond end of device [ 496.513885][T14624] loop5: rw=2049, want=142, limit=63 [ 496.522907][T14624] attempt to access beyond end of device [ 496.530255][T14624] loop5: rw=2049, want=143, limit=63 [ 496.535614][T14624] attempt to access beyond end of device [ 496.541595][T14624] loop5: rw=2049, want=144, limit=63 [ 496.546958][T14624] attempt to access beyond end of device [ 496.553167][T14624] loop5: rw=2049, want=145, limit=63 [ 496.558816][T14624] attempt to access beyond end of device [ 496.564511][T14624] loop5: rw=2049, want=153, limit=63 17:46:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:26 executing program 2: 17:46:26 executing program 3: 17:46:26 executing program 0: 17:46:26 executing program 1: 17:46:26 executing program 4: 17:46:26 executing program 2: 17:46:26 executing program 1: 17:46:26 executing program 3: 17:46:26 executing program 0: 17:46:26 executing program 2: 17:46:26 executing program 4: [ 496.896717][ T27] audit: type=1804 audit(1581788786.694:237): pid=14648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/194/bus" dev="sda1" ino=17217 res=1 [ 496.912737][T14648] attempt to access beyond end of device [ 496.979774][T14648] loop5: rw=2049, want=78, limit=63 [ 496.999265][T14648] attempt to access beyond end of device [ 497.025417][T14648] loop5: rw=2049, want=79, limit=63 [ 497.038618][T14648] attempt to access beyond end of device [ 497.052317][T14648] loop5: rw=2049, want=80, limit=63 [ 497.072091][T14648] attempt to access beyond end of device [ 497.092870][T14648] loop5: rw=2049, want=81, limit=63 [ 497.114693][T14648] attempt to access beyond end of device [ 497.142266][T14648] loop5: rw=2049, want=130, limit=63 [ 497.151794][T14648] attempt to access beyond end of device [ 497.166935][T14648] loop5: rw=2049, want=131, limit=63 [ 497.175702][T14648] attempt to access beyond end of device [ 497.194135][T14648] loop5: rw=2049, want=132, limit=63 [ 497.202808][T14648] attempt to access beyond end of device [ 497.215122][T14648] loop5: rw=2049, want=133, limit=63 [ 497.244878][T14648] attempt to access beyond end of device [ 497.257431][T14648] loop5: rw=2049, want=142, limit=63 [ 497.263013][T14648] attempt to access beyond end of device [ 497.269067][T14648] loop5: rw=2049, want=143, limit=63 [ 497.275033][T14648] attempt to access beyond end of device [ 497.281594][T14648] loop5: rw=2049, want=144, limit=63 [ 497.289219][T14648] attempt to access beyond end of device [ 497.295060][T14648] loop5: rw=2049, want=145, limit=63 [ 497.300714][T14648] attempt to access beyond end of device [ 497.306408][T14648] loop5: rw=2049, want=153, limit=63 17:46:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:27 executing program 3: 17:46:27 executing program 2: 17:46:27 executing program 1: 17:46:27 executing program 4: 17:46:27 executing program 0: 17:46:27 executing program 0: 17:46:27 executing program 4: 17:46:27 executing program 2: 17:46:27 executing program 3: 17:46:27 executing program 1: 17:46:27 executing program 3: [ 497.672144][ T27] audit: type=1804 audit(1581788787.474:238): pid=14674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/195/bus" dev="sda1" ino=17121 res=1 [ 497.701424][T14674] attempt to access beyond end of device [ 497.708686][T14674] loop5: rw=2049, want=78, limit=63 [ 497.714165][T14674] attempt to access beyond end of device [ 497.817197][T14674] loop5: rw=2049, want=79, limit=63 [ 497.822577][T14674] attempt to access beyond end of device [ 497.843015][T14674] loop5: rw=2049, want=80, limit=63 [ 497.862216][T14674] attempt to access beyond end of device [ 497.876672][T14674] loop5: rw=2049, want=81, limit=63 [ 497.891786][T14674] attempt to access beyond end of device [ 497.907363][T14674] loop5: rw=2049, want=130, limit=63 [ 497.915864][T14674] attempt to access beyond end of device [ 497.922871][T14674] loop5: rw=2049, want=131, limit=63 [ 497.941610][T14674] attempt to access beyond end of device [ 497.966755][T14674] loop5: rw=2049, want=132, limit=63 [ 497.974202][T14674] attempt to access beyond end of device [ 497.980450][T14674] loop5: rw=2049, want=133, limit=63 [ 497.991417][T14674] attempt to access beyond end of device [ 498.002796][T14674] loop5: rw=2049, want=142, limit=63 [ 498.017129][T14674] attempt to access beyond end of device [ 498.023158][T14674] loop5: rw=2049, want=143, limit=63 [ 498.028772][T14674] attempt to access beyond end of device [ 498.045407][T14674] loop5: rw=2049, want=144, limit=63 [ 498.073418][T14674] attempt to access beyond end of device [ 498.102845][T14674] loop5: rw=2049, want=145, limit=63 [ 498.109993][T14674] attempt to access beyond end of device [ 498.115689][T14674] loop5: rw=2049, want=153, limit=63 17:46:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:28 executing program 4: 17:46:28 executing program 1: 17:46:28 executing program 0: 17:46:28 executing program 2: 17:46:28 executing program 3: 17:46:28 executing program 3: 17:46:28 executing program 1: 17:46:28 executing program 0: 17:46:28 executing program 4: 17:46:28 executing program 2: [ 498.430881][ T27] audit: type=1804 audit(1581788788.234:239): pid=14701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/196/bus" dev="sda1" ino=17404 res=1 [ 498.489509][T14701] attempt to access beyond end of device [ 498.495193][T14701] loop5: rw=2049, want=78, limit=63 17:46:28 executing program 2: [ 498.570691][T14701] buffer_io_error: 62 callbacks suppressed [ 498.570703][T14701] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 498.699669][T14701] attempt to access beyond end of device [ 498.705451][T14701] loop5: rw=2049, want=79, limit=63 [ 498.731815][T14701] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 498.780773][T14701] attempt to access beyond end of device [ 498.786477][T14701] loop5: rw=2049, want=80, limit=63 [ 498.798642][T14701] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 498.818017][T14701] attempt to access beyond end of device [ 498.824822][T14701] loop5: rw=2049, want=81, limit=63 [ 498.830266][T14701] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 498.840472][T14701] attempt to access beyond end of device [ 498.846167][T14701] loop5: rw=2049, want=130, limit=63 [ 498.855713][T14701] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 498.864662][T14701] attempt to access beyond end of device [ 498.870721][T14701] loop5: rw=2049, want=131, limit=63 [ 498.876130][T14701] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 498.893407][T14701] attempt to access beyond end of device [ 498.899478][T14701] loop5: rw=2049, want=132, limit=63 [ 498.904798][T14701] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 498.913356][T14701] attempt to access beyond end of device [ 498.919055][T14701] loop5: rw=2049, want=133, limit=63 [ 498.924336][T14701] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 498.932973][T14701] attempt to access beyond end of device [ 498.938657][T14701] loop5: rw=2049, want=142, limit=63 [ 498.943941][T14701] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 498.952585][T14701] attempt to access beyond end of device [ 498.958384][T14701] loop5: rw=2049, want=143, limit=63 [ 498.963803][T14701] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 498.972398][T14701] attempt to access beyond end of device [ 498.978031][T14701] loop5: rw=2049, want=144, limit=63 [ 498.983589][T14701] attempt to access beyond end of device [ 498.989262][T14701] loop5: rw=2049, want=145, limit=63 [ 498.994573][T14701] attempt to access beyond end of device [ 499.000274][T14701] loop5: rw=2049, want=153, limit=63 17:46:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:28 executing program 3: 17:46:28 executing program 4: 17:46:28 executing program 1: 17:46:28 executing program 2: 17:46:28 executing program 0: 17:46:29 executing program 0: 17:46:29 executing program 4: 17:46:29 executing program 3: [ 499.353848][ T27] audit: type=1804 audit(1581788789.154:240): pid=14730 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/197/bus" dev="sda1" ino=17406 res=1 17:46:29 executing program 2: 17:46:29 executing program 4: [ 499.397834][T14730] attempt to access beyond end of device [ 499.419091][T14730] loop5: rw=2049, want=78, limit=63 [ 499.428643][T14730] attempt to access beyond end of device 17:46:29 executing program 1: [ 499.518696][T14730] loop5: rw=2049, want=79, limit=63 [ 499.532095][T14730] attempt to access beyond end of device [ 499.571186][T14730] loop5: rw=2049, want=80, limit=63 [ 499.586548][T14730] attempt to access beyond end of device [ 499.606064][T14730] loop5: rw=2049, want=81, limit=63 [ 499.625150][T14730] attempt to access beyond end of device [ 499.672622][T14730] loop5: rw=2049, want=130, limit=63 [ 499.679389][T14730] attempt to access beyond end of device [ 499.685174][T14730] loop5: rw=2049, want=131, limit=63 [ 499.717481][T14730] attempt to access beyond end of device [ 499.728917][T14730] loop5: rw=2049, want=132, limit=63 [ 499.735536][T14730] attempt to access beyond end of device [ 499.741718][T14730] loop5: rw=2049, want=133, limit=63 [ 499.747140][T14730] attempt to access beyond end of device [ 499.753194][T14730] loop5: rw=2049, want=142, limit=63 [ 499.758867][T14730] attempt to access beyond end of device [ 499.764617][T14730] loop5: rw=2049, want=143, limit=63 [ 499.770289][T14730] attempt to access beyond end of device [ 499.775981][T14730] loop5: rw=2049, want=144, limit=63 [ 499.781469][T14730] attempt to access beyond end of device [ 499.787101][T14730] loop5: rw=2049, want=145, limit=63 [ 499.792453][T14730] attempt to access beyond end of device [ 499.798193][T14730] loop5: rw=2049, want=153, limit=63 17:46:29 executing program 2: 17:46:29 executing program 3: 17:46:29 executing program 4: 17:46:29 executing program 0: 17:46:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:29 executing program 1: 17:46:29 executing program 0: 17:46:29 executing program 3: 17:46:29 executing program 2: 17:46:29 executing program 4: 17:46:29 executing program 1: 17:46:30 executing program 1: 17:46:30 executing program 3: 17:46:30 executing program 1: 17:46:30 executing program 4: [ 500.342151][T14757] attempt to access beyond end of device [ 500.358588][T14757] loop5: rw=2049, want=78, limit=63 [ 500.363856][T14757] attempt to access beyond end of device 17:46:30 executing program 0: [ 500.408584][T14757] loop5: rw=2049, want=79, limit=63 [ 500.423687][T14757] attempt to access beyond end of device [ 500.442830][T14757] loop5: rw=2049, want=80, limit=63 [ 500.463483][T14757] attempt to access beyond end of device [ 500.477055][T14757] loop5: rw=2049, want=81, limit=63 [ 500.490178][T14757] attempt to access beyond end of device [ 500.499977][T14757] loop5: rw=2049, want=130, limit=63 [ 500.520957][T14757] attempt to access beyond end of device [ 500.554760][T14757] loop5: rw=2049, want=131, limit=63 [ 500.586164][T14757] attempt to access beyond end of device [ 500.616358][T14757] loop5: rw=2049, want=132, limit=63 [ 500.628006][T14757] attempt to access beyond end of device [ 500.650517][T14757] loop5: rw=2049, want=133, limit=63 [ 500.655901][T14757] attempt to access beyond end of device [ 500.661977][T14757] loop5: rw=2049, want=142, limit=63 [ 500.667864][T14757] attempt to access beyond end of device [ 500.674010][T14757] loop5: rw=2049, want=143, limit=63 [ 500.679595][T14757] attempt to access beyond end of device [ 500.693732][T14757] loop5: rw=2049, want=144, limit=63 [ 500.701626][T14757] attempt to access beyond end of device [ 500.707338][T14757] loop5: rw=2049, want=145, limit=63 [ 500.713022][T14757] attempt to access beyond end of device [ 500.719976][T14757] loop5: rw=2049, want=153, limit=63 17:46:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:30 executing program 2: 17:46:30 executing program 3: 17:46:30 executing program 1: 17:46:30 executing program 0: 17:46:30 executing program 4: 17:46:30 executing program 1: 17:46:30 executing program 2: 17:46:30 executing program 3: 17:46:30 executing program 0: [ 501.065889][ T27] audit: type=1804 audit(1581788790.864:241): pid=14794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/199/bus" dev="sda1" ino=17420 res=1 [ 501.089797][T14794] attempt to access beyond end of device [ 501.096171][T14794] loop5: rw=2049, want=78, limit=63 [ 501.101665][T14794] attempt to access beyond end of device [ 501.107372][T14794] loop5: rw=2049, want=79, limit=63 17:46:30 executing program 4: [ 501.118734][T14794] attempt to access beyond end of device [ 501.124760][T14794] loop5: rw=2049, want=80, limit=63 [ 501.138609][T14794] attempt to access beyond end of device [ 501.144263][T14794] loop5: rw=2049, want=81, limit=63 17:46:31 executing program 2: [ 501.217931][T14794] attempt to access beyond end of device [ 501.237730][T14794] loop5: rw=2049, want=130, limit=63 [ 501.271052][T14794] attempt to access beyond end of device [ 501.284658][T14794] loop5: rw=2049, want=131, limit=63 [ 501.302982][T14794] attempt to access beyond end of device [ 501.317660][T14794] loop5: rw=2049, want=132, limit=63 [ 501.323129][T14794] attempt to access beyond end of device [ 501.329603][T14794] loop5: rw=2049, want=133, limit=63 [ 501.335009][T14794] attempt to access beyond end of device [ 501.340737][T14794] loop5: rw=2049, want=142, limit=63 [ 501.346224][T14794] attempt to access beyond end of device [ 501.352168][T14794] loop5: rw=2049, want=143, limit=63 [ 501.357539][T14794] attempt to access beyond end of device [ 501.363324][T14794] loop5: rw=2049, want=144, limit=63 [ 501.368767][T14794] attempt to access beyond end of device [ 501.374467][T14794] loop5: rw=2049, want=145, limit=63 [ 501.380130][T14794] attempt to access beyond end of device [ 501.394777][T14794] loop5: rw=2049, want=153, limit=63 [ 501.400568][T14800] attempt to access beyond end of device [ 501.406337][T14800] loop5: rw=2049, want=78, limit=63 [ 501.414738][T14800] attempt to access beyond end of device [ 501.421031][T14800] loop5: rw=2049, want=79, limit=63 [ 501.426437][T14800] attempt to access beyond end of device [ 501.434807][T14800] loop5: rw=2049, want=80, limit=63 [ 501.440258][T14800] attempt to access beyond end of device [ 501.446064][T14800] loop5: rw=2049, want=81, limit=63 17:46:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:31 executing program 1: 17:46:31 executing program 3: 17:46:31 executing program 0: 17:46:31 executing program 4: 17:46:31 executing program 2: 17:46:31 executing program 4: 17:46:31 executing program 1: 17:46:31 executing program 0: 17:46:31 executing program 3: 17:46:31 executing program 2: 17:46:31 executing program 2: [ 501.895127][ T27] audit: type=1804 audit(1581788791.694:242): pid=14834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/200/bus" dev="sda1" ino=17432 res=1 [ 502.001591][T14823] attempt to access beyond end of device [ 502.028591][T14823] loop5: rw=2049, want=78, limit=63 [ 502.050062][T14823] attempt to access beyond end of device [ 502.055718][T14823] loop5: rw=2049, want=79, limit=63 [ 502.070578][T14823] attempt to access beyond end of device [ 502.101096][T14823] loop5: rw=2049, want=80, limit=63 [ 502.106402][T14823] attempt to access beyond end of device [ 502.134557][T14823] loop5: rw=2049, want=81, limit=63 [ 502.142518][T14823] attempt to access beyond end of device [ 502.148168][T14823] loop5: rw=2049, want=130, limit=63 [ 502.153676][T14823] attempt to access beyond end of device [ 502.165497][T14823] loop5: rw=2049, want=131, limit=63 [ 502.171043][T14823] attempt to access beyond end of device [ 502.176669][T14823] loop5: rw=2049, want=132, limit=63 [ 502.184281][T14823] attempt to access beyond end of device [ 502.189989][T14823] loop5: rw=2049, want=133, limit=63 [ 502.195272][T14823] attempt to access beyond end of device [ 502.202881][T14823] loop5: rw=2049, want=142, limit=63 [ 502.208274][T14823] attempt to access beyond end of device [ 502.214764][T14823] loop5: rw=2049, want=143, limit=63 [ 502.220105][T14823] attempt to access beyond end of device [ 502.225758][T14823] loop5: rw=2049, want=144, limit=63 [ 502.231064][T14823] attempt to access beyond end of device [ 502.236698][T14823] loop5: rw=2049, want=145, limit=63 [ 502.242158][T14823] attempt to access beyond end of device [ 502.247786][T14823] loop5: rw=2049, want=153, limit=63 17:46:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:32 executing program 3: 17:46:32 executing program 4: 17:46:32 executing program 0: 17:46:32 executing program 1: 17:46:32 executing program 2: 17:46:32 executing program 1: 17:46:32 executing program 2: 17:46:32 executing program 3: 17:46:32 executing program 0: 17:46:32 executing program 4: 17:46:32 executing program 1: [ 502.711786][ T27] audit: type=1804 audit(1581788792.514:243): pid=14853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/201/bus" dev="sda1" ino=17418 res=1 [ 502.829044][T14853] attempt to access beyond end of device [ 502.850666][T14853] loop5: rw=2049, want=78, limit=63 [ 502.884138][T14853] attempt to access beyond end of device [ 502.903114][T14853] loop5: rw=2049, want=79, limit=63 [ 502.928628][T14853] attempt to access beyond end of device [ 502.936152][T14853] loop5: rw=2049, want=80, limit=63 [ 502.941711][T14853] attempt to access beyond end of device [ 502.947386][T14853] loop5: rw=2049, want=81, limit=63 [ 502.952911][T14853] attempt to access beyond end of device [ 502.958856][T14853] loop5: rw=2049, want=130, limit=63 [ 502.964207][T14853] attempt to access beyond end of device [ 502.969921][T14853] loop5: rw=2049, want=131, limit=63 [ 502.975216][T14853] attempt to access beyond end of device [ 502.980988][T14853] loop5: rw=2049, want=132, limit=63 [ 502.986266][T14853] attempt to access beyond end of device [ 502.991979][T14853] loop5: rw=2049, want=133, limit=63 [ 502.997362][T14853] attempt to access beyond end of device [ 503.003040][T14853] loop5: rw=2049, want=142, limit=63 [ 503.008377][T14853] attempt to access beyond end of device [ 503.014115][T14853] loop5: rw=2049, want=143, limit=63 [ 503.021401][T14853] attempt to access beyond end of device [ 503.027241][T14853] loop5: rw=2049, want=144, limit=63 [ 503.032689][T14853] attempt to access beyond end of device [ 503.038359][T14853] loop5: rw=2049, want=145, limit=63 [ 503.043765][T14853] attempt to access beyond end of device [ 503.049511][T14853] loop5: rw=2049, want=153, limit=63 [ 503.055584][T14864] attempt to access beyond end of device [ 503.061320][T14864] loop5: rw=2049, want=78, limit=63 [ 503.066620][T14864] attempt to access beyond end of device [ 503.072339][T14864] loop5: rw=2049, want=79, limit=63 [ 503.077538][T14864] attempt to access beyond end of device [ 503.083192][T14864] loop5: rw=2049, want=80, limit=63 [ 503.088472][T14864] attempt to access beyond end of device [ 503.094373][T14864] loop5: rw=2049, want=81, limit=63 [ 503.099640][T14864] attempt to access beyond end of device [ 503.105290][T14864] loop5: rw=2049, want=130, limit=63 [ 503.110670][T14864] attempt to access beyond end of device [ 503.116319][T14864] loop5: rw=2049, want=131, limit=63 [ 503.121639][T14864] attempt to access beyond end of device [ 503.127287][T14864] loop5: rw=2049, want=132, limit=63 [ 503.132613][T14864] attempt to access beyond end of device [ 503.138349][T14864] loop5: rw=2049, want=133, limit=63 [ 503.143654][T14864] attempt to access beyond end of device [ 503.149323][T14864] loop5: rw=2049, want=142, limit=63 [ 503.154590][T14864] attempt to access beyond end of device [ 503.160237][T14864] loop5: rw=2049, want=143, limit=63 [ 503.165513][T14864] attempt to access beyond end of device [ 503.171350][T14864] loop5: rw=2049, want=144, limit=63 [ 503.176632][T14864] attempt to access beyond end of device [ 503.182287][T14864] loop5: rw=2049, want=145, limit=63 [ 503.187608][T14864] attempt to access beyond end of device [ 503.193347][T14864] loop5: rw=2049, want=153, limit=63 17:46:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:33 executing program 0: 17:46:33 executing program 1: 17:46:33 executing program 2: 17:46:33 executing program 3: 17:46:33 executing program 4: 17:46:33 executing program 2: 17:46:33 executing program 3: 17:46:33 executing program 1: 17:46:33 executing program 0: 17:46:33 executing program 4: 17:46:33 executing program 3: [ 503.634327][ T27] audit: type=1804 audit(1581788793.434:244): pid=14884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/202/bus" dev="sda1" ino=17454 res=1 17:46:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:33 executing program 0: 17:46:33 executing program 3: 17:46:33 executing program 1: 17:46:33 executing program 2: 17:46:33 executing program 4: 17:46:33 executing program 3: 17:46:33 executing program 1: 17:46:33 executing program 4: [ 504.187296][ T27] audit: type=1804 audit(1581788793.984:245): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/203/bus" dev="sda1" ino=17450 res=1 [ 504.220543][T14905] attempt to access beyond end of device [ 504.226359][T14905] loop5: rw=2049, want=78, limit=63 [ 504.231745][T14905] buffer_io_error: 78 callbacks suppressed 17:46:34 executing program 0: 17:46:34 executing program 2: [ 504.231757][T14905] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 504.246084][T14905] attempt to access beyond end of device [ 504.251871][T14905] loop5: rw=2049, want=79, limit=63 [ 504.257145][T14905] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 504.273311][T14905] attempt to access beyond end of device 17:46:34 executing program 3: [ 504.300610][T14905] loop5: rw=2049, want=80, limit=63 [ 504.305884][T14905] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 504.340393][T14905] attempt to access beyond end of device [ 504.364395][T14905] loop5: rw=2049, want=81, limit=63 [ 504.385090][T14905] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 504.422546][T14905] attempt to access beyond end of device [ 504.441268][T14905] loop5: rw=2049, want=130, limit=63 [ 504.458648][T14905] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 504.498621][T14905] attempt to access beyond end of device [ 504.508599][T14905] loop5: rw=2049, want=131, limit=63 [ 504.518814][T14905] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 504.527478][T14905] attempt to access beyond end of device [ 504.548664][T14905] loop5: rw=2049, want=132, limit=63 [ 504.558648][T14905] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 504.593839][T14905] attempt to access beyond end of device [ 504.599618][T14905] loop5: rw=2049, want=133, limit=63 [ 504.604967][T14905] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 504.614225][T14905] attempt to access beyond end of device [ 504.619992][T14905] loop5: rw=2049, want=142, limit=63 [ 504.634114][T14905] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 504.642675][T14905] attempt to access beyond end of device [ 504.648318][T14905] loop5: rw=2049, want=143, limit=63 [ 504.653654][T14905] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 504.662231][T14905] attempt to access beyond end of device [ 504.667857][T14905] loop5: rw=2049, want=144, limit=63 [ 504.673177][T14905] attempt to access beyond end of device [ 504.678894][T14905] loop5: rw=2049, want=145, limit=63 [ 504.684262][T14905] attempt to access beyond end of device [ 504.689949][T14905] loop5: rw=2049, want=153, limit=63 [ 504.695613][T14913] attempt to access beyond end of device [ 504.701281][T14913] loop5: rw=2049, want=78, limit=63 [ 504.706523][T14913] attempt to access beyond end of device [ 504.712219][T14913] loop5: rw=2049, want=79, limit=63 [ 504.717419][T14913] attempt to access beyond end of device [ 504.723093][T14913] loop5: rw=2049, want=80, limit=63 [ 504.728344][T14913] attempt to access beyond end of device [ 504.734109][T14913] loop5: rw=2049, want=81, limit=63 17:46:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:34 executing program 1: 17:46:34 executing program 0: 17:46:34 executing program 4: 17:46:34 executing program 2: 17:46:34 executing program 3: 17:46:34 executing program 1: 17:46:34 executing program 0: 17:46:34 executing program 2: 17:46:34 executing program 3: 17:46:34 executing program 4: [ 505.155900][ T27] audit: type=1804 audit(1581788794.954:246): pid=14939 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/204/bus" dev="sda1" ino=17458 res=1 17:46:35 executing program 2: [ 505.202005][T14939] attempt to access beyond end of device [ 505.207739][T14939] loop5: rw=2049, want=78, limit=63 [ 505.229909][T14939] attempt to access beyond end of device [ 505.242218][T14939] loop5: rw=2049, want=79, limit=63 [ 505.257123][T14939] attempt to access beyond end of device [ 505.277257][T14939] loop5: rw=2049, want=80, limit=63 [ 505.315367][T14939] attempt to access beyond end of device [ 505.378437][T14939] loop5: rw=2049, want=81, limit=63 [ 505.443495][T14939] attempt to access beyond end of device [ 505.474240][T14939] loop5: rw=2049, want=130, limit=63 [ 505.480107][T14939] attempt to access beyond end of device [ 505.485748][T14939] loop5: rw=2049, want=131, limit=63 [ 505.493701][T14939] attempt to access beyond end of device [ 505.499566][T14939] loop5: rw=2049, want=132, limit=63 [ 505.504926][T14939] attempt to access beyond end of device [ 505.510682][T14939] loop5: rw=2049, want=133, limit=63 [ 505.516061][T14939] attempt to access beyond end of device [ 505.521767][T14939] loop5: rw=2049, want=142, limit=63 [ 505.527056][T14939] attempt to access beyond end of device [ 505.532785][T14939] loop5: rw=2049, want=143, limit=63 [ 505.538072][T14939] attempt to access beyond end of device [ 505.543753][T14939] loop5: rw=2049, want=144, limit=63 [ 505.549087][T14939] attempt to access beyond end of device [ 505.554745][T14939] loop5: rw=2049, want=145, limit=63 [ 505.560231][T14939] attempt to access beyond end of device [ 505.565862][T14939] loop5: rw=2049, want=153, limit=63 [ 505.571522][T14946] attempt to access beyond end of device [ 505.577167][T14946] loop5: rw=2049, want=78, limit=63 [ 505.582503][T14946] attempt to access beyond end of device [ 505.588132][T14946] loop5: rw=2049, want=79, limit=63 [ 505.593582][T14946] attempt to access beyond end of device [ 505.599327][T14946] loop5: rw=2049, want=80, limit=63 [ 505.604567][T14946] attempt to access beyond end of device [ 505.610764][T14946] loop5: rw=2049, want=81, limit=63 [ 505.615979][T14946] attempt to access beyond end of device [ 505.621647][T14946] loop5: rw=2049, want=130, limit=63 [ 505.626943][T14946] attempt to access beyond end of device [ 505.632593][T14946] loop5: rw=2049, want=131, limit=63 [ 505.637934][T14946] attempt to access beyond end of device [ 505.643775][T14946] loop5: rw=2049, want=132, limit=63 [ 505.649125][T14946] attempt to access beyond end of device [ 505.654761][T14946] loop5: rw=2049, want=133, limit=63 [ 505.660068][T14946] attempt to access beyond end of device [ 505.665727][T14946] loop5: rw=2049, want=142, limit=63 [ 505.671160][T14946] attempt to access beyond end of device [ 505.676791][T14946] loop5: rw=2049, want=143, limit=63 [ 505.682206][T14946] attempt to access beyond end of device [ 505.688172][T14946] loop5: rw=2049, want=144, limit=63 [ 505.693482][T14946] attempt to access beyond end of device [ 505.699144][T14946] loop5: rw=2049, want=145, limit=63 17:46:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:35 executing program 1: 17:46:35 executing program 3: 17:46:35 executing program 4: 17:46:35 executing program 2: 17:46:35 executing program 0: 17:46:35 executing program 0: 17:46:35 executing program 4: 17:46:35 executing program 1: 17:46:35 executing program 2: 17:46:35 executing program 3: [ 506.168954][ T27] audit: type=1804 audit(1581788795.974:247): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/205/bus" dev="sda1" ino=17455 res=1 17:46:36 executing program 0: [ 506.214169][T14963] attempt to access beyond end of device [ 506.235533][T14963] loop5: rw=2049, want=78, limit=63 [ 506.241812][ T27] audit: type=1804 audit(1581788795.974:248): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/205/bus" dev="sda1" ino=17455 res=1 [ 506.256164][T14963] attempt to access beyond end of device [ 506.358267][T14963] loop5: rw=2049, want=79, limit=63 [ 506.368960][T14963] attempt to access beyond end of device [ 506.412727][T14963] loop5: rw=2049, want=80, limit=63 [ 506.418082][T14963] attempt to access beyond end of device [ 506.425036][T14963] loop5: rw=2049, want=81, limit=63 [ 506.430786][T14963] attempt to access beyond end of device [ 506.436509][T14963] loop5: rw=2049, want=130, limit=63 [ 506.442744][T14963] attempt to access beyond end of device [ 506.448487][T14963] loop5: rw=2049, want=131, limit=63 [ 506.454287][T14963] attempt to access beyond end of device [ 506.460188][T14963] loop5: rw=2049, want=132, limit=63 [ 506.465687][T14963] attempt to access beyond end of device [ 506.471714][T14963] loop5: rw=2049, want=133, limit=63 [ 506.477139][T14963] attempt to access beyond end of device [ 506.483131][T14963] loop5: rw=2049, want=142, limit=63 [ 506.488854][T14963] attempt to access beyond end of device [ 506.494570][T14963] loop5: rw=2049, want=143, limit=63 [ 506.500180][T14963] attempt to access beyond end of device [ 506.505800][T14963] loop5: rw=2049, want=144, limit=63 [ 506.511119][T14963] attempt to access beyond end of device [ 506.516793][T14963] loop5: rw=2049, want=145, limit=63 [ 506.522145][T14963] attempt to access beyond end of device [ 506.527841][T14963] loop5: rw=2049, want=153, limit=63 [ 506.534121][T14971] attempt to access beyond end of device [ 506.539781][T14971] loop5: rw=2049, want=78, limit=63 [ 506.544982][T14971] attempt to access beyond end of device [ 506.550682][T14971] loop5: rw=2049, want=79, limit=63 [ 506.556039][T14971] attempt to access beyond end of device [ 506.561769][T14971] loop5: rw=2049, want=80, limit=63 [ 506.567016][T14971] attempt to access beyond end of device [ 506.572750][T14971] loop5: rw=2049, want=81, limit=63 17:46:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:36 executing program 3: 17:46:36 executing program 4: 17:46:36 executing program 1: 17:46:36 executing program 2: 17:46:36 executing program 0: 17:46:36 executing program 0: 17:46:36 executing program 2: 17:46:36 executing program 3: 17:46:36 executing program 1: 17:46:36 executing program 4: 17:46:36 executing program 2: [ 507.124820][T14995] attempt to access beyond end of device [ 507.170703][T14995] loop5: rw=2049, want=78, limit=63 [ 507.201322][T14995] attempt to access beyond end of device [ 507.212427][T14995] loop5: rw=2049, want=79, limit=63 [ 507.217715][T14995] attempt to access beyond end of device [ 507.224061][T14995] loop5: rw=2049, want=80, limit=63 [ 507.229547][T14995] attempt to access beyond end of device [ 507.235328][T14995] loop5: rw=2049, want=81, limit=63 [ 507.240685][T14995] attempt to access beyond end of device [ 507.258023][T14995] loop5: rw=2049, want=130, limit=63 [ 507.273783][T14995] attempt to access beyond end of device [ 507.279826][T14995] loop5: rw=2049, want=131, limit=63 [ 507.285206][T14995] attempt to access beyond end of device [ 507.297375][T14995] loop5: rw=2049, want=132, limit=63 [ 507.302799][T14995] attempt to access beyond end of device [ 507.308868][T14995] loop5: rw=2049, want=133, limit=63 [ 507.314138][T14995] attempt to access beyond end of device [ 507.320040][T14995] loop5: rw=2049, want=142, limit=63 [ 507.325368][T14995] attempt to access beyond end of device [ 507.331391][T14995] loop5: rw=2049, want=143, limit=63 [ 507.336795][T14995] attempt to access beyond end of device [ 507.342529][T14995] loop5: rw=2049, want=144, limit=63 [ 507.347818][T14995] attempt to access beyond end of device [ 507.353480][T14995] loop5: rw=2049, want=145, limit=63 [ 507.358903][T14995] attempt to access beyond end of device [ 507.364590][T14995] loop5: rw=2049, want=153, limit=63 [ 507.370281][T15004] attempt to access beyond end of device [ 507.376032][T15004] loop5: rw=2049, want=78, limit=63 [ 507.382239][T15004] attempt to access beyond end of device [ 507.387953][T15004] loop5: rw=2049, want=79, limit=63 [ 507.393234][T15004] attempt to access beyond end of device [ 507.400564][T15004] loop5: rw=2049, want=80, limit=63 [ 507.405779][T15004] attempt to access beyond end of device [ 507.411483][T15004] loop5: rw=2049, want=81, limit=63 [ 507.416712][T15004] attempt to access beyond end of device [ 507.422435][T15004] loop5: rw=2049, want=130, limit=63 [ 507.427726][T15004] attempt to access beyond end of device [ 507.433438][T15004] loop5: rw=2049, want=131, limit=63 [ 507.438753][T15004] attempt to access beyond end of device [ 507.444383][T15004] loop5: rw=2049, want=132, limit=63 [ 507.449798][T15004] attempt to access beyond end of device [ 507.455422][T15004] loop5: rw=2049, want=133, limit=63 [ 507.460809][T15004] attempt to access beyond end of device [ 507.466511][T15004] loop5: rw=2049, want=142, limit=63 [ 507.471922][T15004] attempt to access beyond end of device [ 507.477586][T15004] loop5: rw=2049, want=143, limit=63 [ 507.482942][T15004] attempt to access beyond end of device [ 507.488690][T15004] loop5: rw=2049, want=144, limit=63 [ 507.493971][T15004] attempt to access beyond end of device [ 507.499618][T15004] loop5: rw=2049, want=145, limit=63 [ 507.505001][T15004] attempt to access beyond end of device [ 507.511118][T15004] loop5: rw=2049, want=153, limit=63 17:46:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:37 executing program 0: 17:46:37 executing program 4: 17:46:37 executing program 2: 17:46:37 executing program 1: 17:46:37 executing program 3: 17:46:37 executing program 3: 17:46:37 executing program 0: 17:46:37 executing program 2: 17:46:37 executing program 4: 17:46:37 executing program 1: 17:46:37 executing program 3: [ 508.013758][T15020] attempt to access beyond end of device [ 508.058205][T15020] loop5: rw=2049, want=78, limit=63 [ 508.081732][T15020] attempt to access beyond end of device [ 508.088867][T15020] loop5: rw=2049, want=79, limit=63 [ 508.094111][T15020] attempt to access beyond end of device [ 508.130210][T15020] loop5: rw=2049, want=80, limit=63 [ 508.152070][T15020] attempt to access beyond end of device [ 508.157826][T15020] loop5: rw=2049, want=81, limit=63 [ 508.163463][T15020] attempt to access beyond end of device [ 508.196002][T15020] loop5: rw=2049, want=130, limit=63 [ 508.201409][T15020] attempt to access beyond end of device [ 508.207163][T15020] loop5: rw=2049, want=131, limit=63 [ 508.212553][T15020] attempt to access beyond end of device [ 508.218191][T15020] loop5: rw=2049, want=132, limit=63 [ 508.232681][T15020] attempt to access beyond end of device [ 508.238810][T15020] loop5: rw=2049, want=133, limit=63 [ 508.244102][T15020] attempt to access beyond end of device [ 508.249827][T15020] loop5: rw=2049, want=142, limit=63 [ 508.255188][T15020] attempt to access beyond end of device [ 508.260910][T15020] loop5: rw=2049, want=143, limit=63 [ 508.266198][T15020] attempt to access beyond end of device [ 508.271861][T15020] loop5: rw=2049, want=144, limit=63 [ 508.277202][T15020] attempt to access beyond end of device [ 508.282880][T15020] loop5: rw=2049, want=145, limit=63 [ 508.288470][T15020] attempt to access beyond end of device [ 508.294242][T15020] loop5: rw=2049, want=153, limit=63 [ 508.299957][T15031] attempt to access beyond end of device [ 508.305587][T15031] loop5: rw=2049, want=78, limit=63 [ 508.311644][T15031] attempt to access beyond end of device [ 508.317350][T15031] loop5: rw=2049, want=79, limit=63 [ 508.323680][T15031] attempt to access beyond end of device [ 508.329490][T15031] loop5: rw=2049, want=80, limit=63 [ 508.334688][T15031] attempt to access beyond end of device [ 508.341194][T15031] loop5: rw=2049, want=81, limit=63 17:46:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:38 executing program 3: 17:46:38 executing program 0: 17:46:38 executing program 2: 17:46:38 executing program 1: 17:46:38 executing program 4: 17:46:38 executing program 3: 17:46:38 executing program 4: 17:46:38 executing program 1: 17:46:38 executing program 2: 17:46:38 executing program 0: 17:46:38 executing program 4: [ 508.745804][ T27] audit: type=1804 audit(1581788798.544:249): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/208/bus" dev="sda1" ino=17488 res=1 [ 508.766505][T15053] attempt to access beyond end of device [ 508.778862][T15053] loop5: rw=2049, want=78, limit=63 [ 508.784201][T15053] attempt to access beyond end of device [ 508.918617][T15053] loop5: rw=2049, want=79, limit=63 [ 508.923875][T15053] attempt to access beyond end of device [ 509.008661][T15053] loop5: rw=2049, want=80, limit=63 [ 509.014078][T15053] attempt to access beyond end of device [ 509.021136][T15053] loop5: rw=2049, want=81, limit=63 [ 509.026696][T15053] attempt to access beyond end of device [ 509.032598][T15053] loop5: rw=2049, want=130, limit=63 [ 509.037950][T15053] attempt to access beyond end of device [ 509.043785][T15053] loop5: rw=2049, want=131, limit=63 [ 509.049209][T15053] attempt to access beyond end of device [ 509.054907][T15053] loop5: rw=2049, want=132, limit=63 [ 509.071588][T15053] attempt to access beyond end of device [ 509.093027][T15053] loop5: rw=2049, want=133, limit=63 [ 509.098380][T15053] attempt to access beyond end of device [ 509.108624][T15053] loop5: rw=2049, want=142, limit=63 [ 509.113937][T15053] attempt to access beyond end of device [ 509.134363][T15053] loop5: rw=2049, want=143, limit=63 [ 509.142299][T15053] attempt to access beyond end of device [ 509.147968][T15053] loop5: rw=2049, want=144, limit=63 [ 509.153481][T15053] attempt to access beyond end of device [ 509.161821][T15053] loop5: rw=2049, want=145, limit=63 [ 509.167219][T15053] attempt to access beyond end of device [ 509.172987][T15053] loop5: rw=2049, want=153, limit=63 [ 509.180898][T15058] attempt to access beyond end of device [ 509.186537][T15058] loop5: rw=2049, want=78, limit=63 [ 509.191832][T15058] attempt to access beyond end of device [ 509.197457][T15058] loop5: rw=2049, want=79, limit=63 [ 509.204314][T15058] attempt to access beyond end of device [ 509.210289][T15058] loop5: rw=2049, want=80, limit=63 [ 509.215544][T15058] attempt to access beyond end of device [ 509.221276][T15058] loop5: rw=2049, want=81, limit=63 17:46:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:39 executing program 1: 17:46:39 executing program 2: 17:46:39 executing program 3: 17:46:39 executing program 0: 17:46:39 executing program 4: 17:46:39 executing program 1: 17:46:39 executing program 2: 17:46:39 executing program 3: 17:46:39 executing program 4: 17:46:39 executing program 0: 17:46:39 executing program 2: [ 509.795023][ T27] audit: type=1804 audit(1581788799.594:250): pid=15090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/209/bus" dev="sda1" ino=17501 res=1 17:46:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:39 executing program 1: 17:46:39 executing program 3: 17:46:39 executing program 2: 17:46:39 executing program 0: 17:46:39 executing program 4: 17:46:40 executing program 1: 17:46:40 executing program 3: 17:46:40 executing program 2: 17:46:40 executing program 4: 17:46:40 executing program 0: [ 510.413199][ T27] audit: type=1804 audit(1581788800.214:251): pid=15115 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/210/bus" dev="sda1" ino=17498 res=1 17:46:40 executing program 0: [ 510.543209][T15108] attempt to access beyond end of device [ 510.595025][ T27] audit: type=1804 audit(1581788800.274:252): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/210/bus" dev="sda1" ino=17498 res=1 [ 510.608935][T15108] loop5: rw=2049, want=78, limit=63 [ 510.675570][T15108] buffer_io_error: 102 callbacks suppressed [ 510.675581][T15108] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 510.743107][T15108] attempt to access beyond end of device [ 510.770158][T15108] loop5: rw=2049, want=79, limit=63 [ 510.789037][T15108] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 510.842534][T15108] attempt to access beyond end of device [ 510.873483][T15108] loop5: rw=2049, want=80, limit=63 [ 510.899229][T15108] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 510.928918][T15108] attempt to access beyond end of device [ 510.934629][T15108] loop5: rw=2049, want=81, limit=63 [ 510.960947][T15108] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 510.969731][T15108] attempt to access beyond end of device [ 510.988575][T15108] loop5: rw=2049, want=130, limit=63 [ 510.993915][T15108] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 511.021160][T15108] attempt to access beyond end of device [ 511.026878][T15108] loop5: rw=2049, want=131, limit=63 [ 511.038590][T15108] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 511.056475][T15108] attempt to access beyond end of device [ 511.062333][T15108] loop5: rw=2049, want=132, limit=63 [ 511.067708][T15108] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 511.076383][T15108] attempt to access beyond end of device [ 511.082222][T15108] loop5: rw=2049, want=133, limit=63 [ 511.087565][T15108] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 511.096223][T15108] attempt to access beyond end of device [ 511.102035][T15108] loop5: rw=2049, want=142, limit=63 [ 511.107363][T15108] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 511.116158][T15108] attempt to access beyond end of device [ 511.121998][T15108] loop5: rw=2049, want=143, limit=63 [ 511.127345][T15108] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 511.136253][T15108] attempt to access beyond end of device [ 511.142201][T15108] loop5: rw=2049, want=144, limit=63 [ 511.147659][T15108] attempt to access beyond end of device [ 511.153614][T15108] loop5: rw=2049, want=145, limit=63 [ 511.159185][T15108] attempt to access beyond end of device [ 511.164983][T15108] loop5: rw=2049, want=153, limit=63 [ 511.172238][T15115] attempt to access beyond end of device [ 511.177892][T15115] loop5: rw=2049, want=78, limit=63 [ 511.184917][T15115] attempt to access beyond end of device [ 511.192063][T15115] loop5: rw=2049, want=79, limit=63 [ 511.197353][T15115] attempt to access beyond end of device [ 511.204686][T15115] loop5: rw=2049, want=80, limit=63 [ 511.211543][T15115] attempt to access beyond end of device [ 511.217188][T15115] loop5: rw=2049, want=81, limit=63 17:46:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:41 executing program 3: 17:46:41 executing program 1: 17:46:41 executing program 4: 17:46:41 executing program 2: 17:46:41 executing program 0: 17:46:41 executing program 1: 17:46:41 executing program 3: 17:46:41 executing program 2: 17:46:41 executing program 4: 17:46:41 executing program 0: 17:46:41 executing program 2: [ 511.721935][T15137] attempt to access beyond end of device [ 511.770848][T15137] loop5: rw=2049, want=78, limit=63 [ 511.792245][T15137] attempt to access beyond end of device [ 511.806601][T15137] loop5: rw=2049, want=79, limit=63 [ 511.868660][T15137] attempt to access beyond end of device [ 511.884229][T15137] loop5: rw=2049, want=80, limit=63 [ 511.890323][T15137] attempt to access beyond end of device [ 511.896071][T15137] loop5: rw=2049, want=81, limit=63 [ 511.901761][T15137] attempt to access beyond end of device [ 511.907565][T15137] loop5: rw=2049, want=130, limit=63 [ 511.913684][T15137] attempt to access beyond end of device [ 511.919564][T15137] loop5: rw=2049, want=131, limit=63 [ 511.924928][T15137] attempt to access beyond end of device [ 511.931031][T15137] loop5: rw=2049, want=132, limit=63 [ 511.936462][T15137] attempt to access beyond end of device [ 511.948638][T15137] loop5: rw=2049, want=133, limit=63 [ 511.959741][T15137] attempt to access beyond end of device [ 511.965465][T15137] loop5: rw=2049, want=142, limit=63 [ 511.970844][T15137] attempt to access beyond end of device [ 511.976537][T15137] loop5: rw=2049, want=143, limit=63 [ 511.981856][T15137] attempt to access beyond end of device [ 511.987488][T15137] loop5: rw=2049, want=144, limit=63 [ 511.992858][T15137] attempt to access beyond end of device [ 511.998496][T15137] loop5: rw=2049, want=145, limit=63 [ 512.003863][T15137] attempt to access beyond end of device [ 512.009545][T15137] loop5: rw=2049, want=153, limit=63 [ 512.015140][T15146] attempt to access beyond end of device [ 512.020880][T15146] loop5: rw=2049, want=78, limit=63 [ 512.026130][T15146] attempt to access beyond end of device [ 512.031862][T15146] loop5: rw=2049, want=79, limit=63 [ 512.037162][T15146] attempt to access beyond end of device [ 512.043136][T15146] loop5: rw=2049, want=80, limit=63 [ 512.048356][T15146] attempt to access beyond end of device [ 512.054029][T15146] loop5: rw=2049, want=81, limit=63 17:46:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:41 executing program 3: 17:46:41 executing program 0: 17:46:41 executing program 1: 17:46:41 executing program 4: 17:46:41 executing program 2: 17:46:42 executing program 3: 17:46:42 executing program 2: 17:46:42 executing program 4: 17:46:42 executing program 1: 17:46:42 executing program 0: 17:46:42 executing program 2: 17:46:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:42 executing program 3: 17:46:42 executing program 4: 17:46:42 executing program 1: 17:46:42 executing program 2: 17:46:42 executing program 0: 17:46:42 executing program 2: 17:46:42 executing program 1: 17:46:42 executing program 3: 17:46:42 executing program 4: 17:46:42 executing program 1: 17:46:42 executing program 0: [ 513.167401][ T27] audit: type=1804 audit(1581788802.964:253): pid=15202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/213/bus" dev="sda1" ino=17534 res=1 [ 513.184613][T15202] attempt to access beyond end of device [ 513.220791][T15202] loop5: rw=2049, want=78, limit=63 [ 513.228649][T15202] attempt to access beyond end of device [ 513.262800][T15202] loop5: rw=2049, want=79, limit=63 [ 513.345194][T15202] attempt to access beyond end of device [ 513.368601][T15202] loop5: rw=2049, want=80, limit=63 [ 513.373941][T15202] attempt to access beyond end of device [ 513.387214][T15202] loop5: rw=2049, want=81, limit=63 [ 513.392955][T15202] attempt to access beyond end of device [ 513.399392][T15202] loop5: rw=2049, want=130, limit=63 [ 513.404999][T15202] attempt to access beyond end of device [ 513.420339][T15202] loop5: rw=2049, want=131, limit=63 [ 513.425687][T15202] attempt to access beyond end of device [ 513.431650][T15202] loop5: rw=2049, want=132, limit=63 [ 513.437542][T15202] attempt to access beyond end of device [ 513.443500][T15202] loop5: rw=2049, want=133, limit=63 [ 513.449028][T15202] attempt to access beyond end of device [ 513.454668][T15202] loop5: rw=2049, want=142, limit=63 [ 513.460313][T15202] attempt to access beyond end of device [ 513.465953][T15202] loop5: rw=2049, want=143, limit=63 [ 513.471521][T15202] attempt to access beyond end of device [ 513.477158][T15202] loop5: rw=2049, want=144, limit=63 [ 513.482761][T15202] attempt to access beyond end of device [ 513.488397][T15202] loop5: rw=2049, want=145, limit=63 [ 513.494150][T15202] attempt to access beyond end of device [ 513.499820][T15202] loop5: rw=2049, want=153, limit=63 [ 513.505488][T15209] attempt to access beyond end of device [ 513.511259][T15209] loop5: rw=2049, want=78, limit=63 [ 513.516471][T15209] attempt to access beyond end of device [ 513.522218][T15209] loop5: rw=2049, want=79, limit=63 [ 513.527416][T15209] attempt to access beyond end of device [ 513.533709][T15209] loop5: rw=2049, want=80, limit=63 [ 513.538937][T15209] attempt to access beyond end of device [ 513.544608][T15209] loop5: rw=2049, want=81, limit=63 17:46:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:43 executing program 4: 17:46:43 executing program 3: 17:46:43 executing program 1: 17:46:43 executing program 2: 17:46:43 executing program 0: 17:46:43 executing program 0: 17:46:43 executing program 3: 17:46:43 executing program 4: 17:46:43 executing program 2: 17:46:43 executing program 1: 17:46:43 executing program 3: [ 514.096008][ T27] audit: type=1804 audit(1581788803.894:254): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/214/bus" dev="sda1" ino=16577 res=1 [ 514.189356][T15232] attempt to access beyond end of device [ 514.195134][T15232] loop5: rw=2049, want=78, limit=63 [ 514.243318][T15232] attempt to access beyond end of device [ 514.264072][T15232] loop5: rw=2049, want=79, limit=63 [ 514.271597][T15232] attempt to access beyond end of device [ 514.277321][T15232] loop5: rw=2049, want=80, limit=63 [ 514.285420][T15232] attempt to access beyond end of device [ 514.291698][T15232] loop5: rw=2049, want=81, limit=63 [ 514.296943][T15232] attempt to access beyond end of device [ 514.302630][T15232] loop5: rw=2049, want=130, limit=63 [ 514.307966][T15232] attempt to access beyond end of device [ 514.313935][T15232] loop5: rw=2049, want=131, limit=63 [ 514.319291][T15232] attempt to access beyond end of device [ 514.324934][T15232] loop5: rw=2049, want=132, limit=63 [ 514.330606][T15232] attempt to access beyond end of device [ 514.336264][T15232] loop5: rw=2049, want=133, limit=63 [ 514.341580][T15232] attempt to access beyond end of device [ 514.347268][T15232] loop5: rw=2049, want=142, limit=63 [ 514.352843][T15232] attempt to access beyond end of device [ 514.358513][T15232] loop5: rw=2049, want=143, limit=63 [ 514.363972][T15232] attempt to access beyond end of device [ 514.370717][T15232] loop5: rw=2049, want=144, limit=63 [ 514.376071][T15232] attempt to access beyond end of device [ 514.381759][T15232] loop5: rw=2049, want=145, limit=63 [ 514.387166][T15232] attempt to access beyond end of device [ 514.392924][T15232] loop5: rw=2049, want=153, limit=63 [ 514.398604][T15243] attempt to access beyond end of device [ 514.404236][T15243] loop5: rw=2049, want=78, limit=63 [ 514.409770][T15243] attempt to access beyond end of device [ 514.415451][T15243] loop5: rw=2049, want=79, limit=63 [ 514.420678][T15243] attempt to access beyond end of device [ 514.426307][T15243] loop5: rw=2049, want=80, limit=63 [ 514.431568][T15243] attempt to access beyond end of device [ 514.437223][T15243] loop5: rw=2049, want=81, limit=63 [ 514.442486][T15243] attempt to access beyond end of device [ 514.448117][T15243] loop5: rw=2049, want=130, limit=63 [ 514.453448][T15243] attempt to access beyond end of device [ 514.459317][T15243] loop5: rw=2049, want=131, limit=63 [ 514.464593][T15243] attempt to access beyond end of device [ 514.470243][T15243] loop5: rw=2049, want=132, limit=63 [ 514.475560][T15243] attempt to access beyond end of device [ 514.481898][T15243] loop5: rw=2049, want=133, limit=63 [ 514.487177][T15243] attempt to access beyond end of device [ 514.492827][T15243] loop5: rw=2049, want=142, limit=63 [ 514.498123][T15243] attempt to access beyond end of device [ 514.504037][T15243] loop5: rw=2049, want=143, limit=63 [ 514.509381][T15243] attempt to access beyond end of device [ 514.515005][T15243] loop5: rw=2049, want=144, limit=63 [ 514.520314][T15243] attempt to access beyond end of device [ 514.525995][T15243] loop5: rw=2049, want=145, limit=63 [ 514.531466][T15243] attempt to access beyond end of device [ 514.537091][T15243] loop5: rw=2049, want=153, limit=63 17:46:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:44 executing program 1: 17:46:44 executing program 4: 17:46:44 executing program 0: 17:46:44 executing program 3: 17:46:44 executing program 2: 17:46:44 executing program 1: 17:46:44 executing program 2: 17:46:44 executing program 3: 17:46:44 executing program 4: 17:46:44 executing program 0: 17:46:44 executing program 1: [ 515.023124][ T27] audit: type=1804 audit(1581788804.814:255): pid=15261 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/215/bus" dev="sda1" ino=16577 res=1 [ 515.047931][T15261] attempt to access beyond end of device [ 515.056893][T15261] loop5: rw=2049, want=78, limit=63 [ 515.071100][T15261] attempt to access beyond end of device [ 515.085841][T15261] loop5: rw=2049, want=79, limit=63 [ 515.100061][T15261] attempt to access beyond end of device [ 515.113414][T15261] loop5: rw=2049, want=80, limit=63 [ 515.120344][T15261] attempt to access beyond end of device [ 515.135989][T15261] loop5: rw=2049, want=81, limit=63 [ 515.141659][T15261] attempt to access beyond end of device [ 515.147351][T15261] loop5: rw=2049, want=130, limit=63 [ 515.153084][T15261] attempt to access beyond end of device [ 515.159474][T15261] loop5: rw=2049, want=131, limit=63 [ 515.164977][T15261] attempt to access beyond end of device [ 515.171046][T15261] loop5: rw=2049, want=132, limit=63 [ 515.176401][T15261] attempt to access beyond end of device [ 515.182442][T15261] loop5: rw=2049, want=133, limit=63 [ 515.209976][T15261] attempt to access beyond end of device [ 515.261554][T15261] loop5: rw=2049, want=142, limit=63 [ 515.266986][T15261] attempt to access beyond end of device [ 515.297611][T15261] loop5: rw=2049, want=143, limit=63 [ 515.303318][T15261] attempt to access beyond end of device [ 515.309388][T15261] loop5: rw=2049, want=144, limit=63 [ 515.314680][T15261] attempt to access beyond end of device [ 515.320414][T15261] loop5: rw=2049, want=145, limit=63 [ 515.325759][T15261] attempt to access beyond end of device [ 515.332586][T15261] loop5: rw=2049, want=153, limit=63 [ 515.338222][T15268] attempt to access beyond end of device [ 515.343889][T15268] loop5: rw=2049, want=78, limit=63 [ 515.349124][T15268] attempt to access beyond end of device [ 515.354789][T15268] loop5: rw=2049, want=79, limit=63 [ 515.360007][T15268] attempt to access beyond end of device [ 515.365639][T15268] loop5: rw=2049, want=80, limit=63 [ 515.370867][T15268] attempt to access beyond end of device [ 515.376659][T15268] loop5: rw=2049, want=81, limit=63 [ 515.381900][T15268] attempt to access beyond end of device [ 515.387717][T15268] loop5: rw=2049, want=130, limit=63 [ 515.393077][T15268] attempt to access beyond end of device [ 515.398773][T15268] loop5: rw=2049, want=131, limit=63 [ 515.404046][T15268] attempt to access beyond end of device [ 515.409741][T15268] loop5: rw=2049, want=132, limit=63 [ 515.415020][T15268] attempt to access beyond end of device [ 515.420681][T15268] loop5: rw=2049, want=133, limit=63 [ 515.425963][T15268] attempt to access beyond end of device [ 515.431624][T15268] loop5: rw=2049, want=142, limit=63 [ 515.437021][T15268] attempt to access beyond end of device [ 515.442780][T15268] loop5: rw=2049, want=143, limit=63 [ 515.452874][T15268] attempt to access beyond end of device [ 515.458493][T15268] loop5: rw=2049, want=144, limit=63 [ 515.463870][T15268] attempt to access beyond end of device [ 515.469702][T15268] loop5: rw=2049, want=145, limit=63 [ 515.475089][T15268] attempt to access beyond end of device [ 515.480806][T15268] loop5: rw=2049, want=153, limit=63 17:46:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:45 executing program 1: 17:46:45 executing program 3: 17:46:45 executing program 4: 17:46:45 executing program 2: 17:46:45 executing program 0: 17:46:45 executing program 0: 17:46:45 executing program 3: 17:46:45 executing program 4: 17:46:45 executing program 2: 17:46:45 executing program 1: [ 515.821353][ T27] audit: type=1804 audit(1581788805.624:256): pid=15282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/216/bus" dev="sda1" ino=17536 res=1 [ 515.829870][T15282] attempt to access beyond end of device [ 515.851738][T15282] loop5: rw=2049, want=78, limit=63 [ 515.857100][T15282] buffer_io_error: 86 callbacks suppressed [ 515.857112][T15282] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 515.871846][T15282] attempt to access beyond end of device [ 515.879554][T15282] loop5: rw=2049, want=79, limit=63 [ 515.885214][T15282] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 515.893871][T15282] attempt to access beyond end of device [ 515.899677][T15282] loop5: rw=2049, want=80, limit=63 [ 515.904931][T15282] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 515.913477][T15282] attempt to access beyond end of device [ 515.919305][T15282] loop5: rw=2049, want=81, limit=63 [ 515.924610][T15282] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 515.933717][T15282] attempt to access beyond end of device [ 515.940300][T15282] loop5: rw=2049, want=130, limit=63 [ 515.945720][T15282] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 515.963310][T15282] attempt to access beyond end of device [ 515.978262][T15282] loop5: rw=2049, want=131, limit=63 [ 516.027659][T15282] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 516.055924][T15282] attempt to access beyond end of device [ 516.082044][T15282] loop5: rw=2049, want=132, limit=63 [ 516.096579][T15282] Buffer I/O error on dev loop5, logical block 131, lost async page write 17:46:45 executing program 1: [ 516.128657][T15282] attempt to access beyond end of device [ 516.143482][T15282] loop5: rw=2049, want=133, limit=63 [ 516.168612][T15282] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 516.195543][T15282] attempt to access beyond end of device [ 516.201675][T15282] loop5: rw=2049, want=142, limit=63 [ 516.233082][T15282] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 516.275811][T15282] attempt to access beyond end of device [ 516.291007][T15282] loop5: rw=2049, want=143, limit=63 [ 516.308667][T15282] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 516.329515][T15282] attempt to access beyond end of device [ 516.335298][T15282] loop5: rw=2049, want=144, limit=63 [ 516.341305][T15282] attempt to access beyond end of device [ 516.347024][T15282] loop5: rw=2049, want=145, limit=63 [ 516.352749][T15282] attempt to access beyond end of device [ 516.358457][T15282] loop5: rw=2049, want=153, limit=63 [ 516.364429][T15284] attempt to access beyond end of device [ 516.370421][T15284] loop5: rw=2049, want=78, limit=63 [ 516.375683][T15284] attempt to access beyond end of device [ 516.381568][T15284] loop5: rw=2049, want=79, limit=63 [ 516.386933][T15284] attempt to access beyond end of device [ 516.393003][T15284] loop5: rw=2049, want=80, limit=63 [ 516.398259][T15284] attempt to access beyond end of device [ 516.403994][T15284] loop5: rw=2049, want=81, limit=63 17:46:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:46 executing program 3: 17:46:46 executing program 0: 17:46:46 executing program 2: 17:46:46 executing program 4: 17:46:46 executing program 1: 17:46:46 executing program 2: 17:46:46 executing program 1: 17:46:46 executing program 3: 17:46:46 executing program 0: 17:46:46 executing program 4: 17:46:46 executing program 1: [ 516.915079][ T27] audit: type=1804 audit(1581788806.714:257): pid=15319 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/217/bus" dev="sda1" ino=17567 res=1 [ 516.935249][T15319] attempt to access beyond end of device [ 516.960431][T15319] loop5: rw=2049, want=78, limit=63 [ 516.965812][T15319] attempt to access beyond end of device [ 516.983170][T15319] loop5: rw=2049, want=79, limit=63 [ 517.000976][T15319] attempt to access beyond end of device [ 517.013606][T15319] loop5: rw=2049, want=80, limit=63 [ 517.024395][T15319] attempt to access beyond end of device [ 517.036711][T15319] loop5: rw=2049, want=81, limit=63 [ 517.047834][T15319] attempt to access beyond end of device [ 517.057809][T15319] loop5: rw=2049, want=130, limit=63 [ 517.069878][T15319] attempt to access beyond end of device [ 517.091507][T15319] loop5: rw=2049, want=131, limit=63 [ 517.096892][T15319] attempt to access beyond end of device [ 517.108983][T15319] loop5: rw=2049, want=132, limit=63 [ 517.114359][T15319] attempt to access beyond end of device [ 517.133938][T15319] loop5: rw=2049, want=133, limit=63 [ 517.148639][T15319] attempt to access beyond end of device [ 517.174788][T15319] loop5: rw=2049, want=142, limit=63 [ 517.180394][T15319] attempt to access beyond end of device [ 517.186083][T15319] loop5: rw=2049, want=143, limit=63 [ 517.192755][T15319] attempt to access beyond end of device [ 517.198430][T15319] loop5: rw=2049, want=144, limit=63 [ 517.204101][T15319] attempt to access beyond end of device [ 517.209990][T15319] loop5: rw=2049, want=145, limit=63 [ 517.215362][T15319] attempt to access beyond end of device [ 517.221133][T15319] loop5: rw=2049, want=153, limit=63 [ 517.226752][T15325] attempt to access beyond end of device [ 517.234449][T15325] loop5: rw=2049, want=78, limit=63 [ 517.239845][T15325] attempt to access beyond end of device [ 517.245466][T15325] loop5: rw=2049, want=79, limit=63 [ 517.251157][T15325] attempt to access beyond end of device [ 517.256777][T15325] loop5: rw=2049, want=80, limit=63 [ 517.262164][T15325] attempt to access beyond end of device [ 517.267790][T15325] loop5: rw=2049, want=81, limit=63 17:46:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:47 executing program 3: 17:46:47 executing program 0: 17:46:47 executing program 1: 17:46:47 executing program 2: 17:46:47 executing program 4: 17:46:47 executing program 0: 17:46:47 executing program 2: 17:46:47 executing program 1: 17:46:47 executing program 3: 17:46:47 executing program 4: 17:46:47 executing program 2: [ 517.697318][ T27] audit: type=1804 audit(1581788807.494:258): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/218/bus" dev="sda1" ino=17570 res=1 17:46:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:47 executing program 0: 17:46:47 executing program 4: 17:46:47 executing program 3: 17:46:47 executing program 2: 17:46:47 executing program 1: 17:46:47 executing program 2: 17:46:47 executing program 0: 17:46:47 executing program 4: 17:46:48 executing program 3: 17:46:48 executing program 1: [ 518.331549][ T27] audit: type=1804 audit(1581788808.134:259): pid=15373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/219/bus" dev="sda1" ino=17575 res=1 [ 518.364610][T15373] attempt to access beyond end of device [ 518.370520][T15373] loop5: rw=2049, want=78, limit=63 [ 518.375806][T15373] attempt to access beyond end of device [ 518.381602][T15373] loop5: rw=2049, want=79, limit=63 [ 518.387215][T15373] attempt to access beyond end of device [ 518.393078][T15373] loop5: rw=2049, want=80, limit=63 [ 518.398371][T15373] attempt to access beyond end of device [ 518.404221][T15373] loop5: rw=2049, want=81, limit=63 [ 518.409739][T15373] attempt to access beyond end of device [ 518.415753][T15373] loop5: rw=2049, want=130, limit=63 [ 518.421860][T15373] attempt to access beyond end of device [ 518.427636][T15373] loop5: rw=2049, want=131, limit=63 [ 518.433019][T15373] attempt to access beyond end of device [ 518.438905][T15373] loop5: rw=2049, want=132, limit=63 [ 518.444262][T15373] attempt to access beyond end of device [ 518.449956][T15373] loop5: rw=2049, want=133, limit=63 [ 518.455475][T15373] attempt to access beyond end of device [ 518.461309][T15373] loop5: rw=2049, want=142, limit=63 [ 518.466631][T15373] attempt to access beyond end of device [ 518.472742][T15373] loop5: rw=2049, want=143, limit=63 17:46:48 executing program 2: [ 518.478794][T15373] attempt to access beyond end of device [ 518.484489][T15373] loop5: rw=2049, want=144, limit=63 [ 518.490069][T15373] attempt to access beyond end of device [ 518.495763][T15373] loop5: rw=2049, want=145, limit=63 [ 518.501418][T15373] attempt to access beyond end of device [ 518.507128][T15373] loop5: rw=2049, want=153, limit=63 [ 518.513196][T15379] attempt to access beyond end of device [ 518.519300][T15379] loop5: rw=2049, want=78, limit=63 [ 518.524818][T15379] attempt to access beyond end of device [ 518.530657][T15379] loop5: rw=2049, want=79, limit=63 [ 518.536097][T15379] attempt to access beyond end of device [ 518.542006][T15379] loop5: rw=2049, want=80, limit=63 [ 518.547313][T15379] attempt to access beyond end of device [ 518.553291][T15379] loop5: rw=2049, want=81, limit=63 [ 518.558807][T15379] attempt to access beyond end of device [ 518.564495][T15379] loop5: rw=2049, want=130, limit=63 [ 518.593344][T15379] attempt to access beyond end of device [ 518.606446][T15379] loop5: rw=2049, want=131, limit=63 [ 518.616463][T15379] attempt to access beyond end of device [ 518.632007][T15379] loop5: rw=2049, want=132, limit=63 [ 518.656390][T15379] attempt to access beyond end of device [ 518.665524][T15379] loop5: rw=2049, want=133, limit=63 [ 518.671234][T15379] attempt to access beyond end of device [ 518.677196][T15379] loop5: rw=2049, want=142, limit=63 [ 518.682566][T15379] attempt to access beyond end of device [ 518.688457][T15379] loop5: rw=2049, want=143, limit=63 [ 518.693827][T15379] attempt to access beyond end of device [ 518.699744][T15379] loop5: rw=2049, want=144, limit=63 [ 518.705089][T15379] attempt to access beyond end of device [ 518.714479][T15379] loop5: rw=2049, want=145, limit=63 17:46:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x0) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:48 executing program 0: 17:46:48 executing program 3: 17:46:48 executing program 1: 17:46:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x7c, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x8000, 0x0) fchmodat(r2, &(0x7f0000000b40)='./file0\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x351, 0x6002) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000580)=0x8) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00') r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x40047452, &(0x7f0000000040)={0x18, 0x4, {0x0, @local}}) socket$pppoe(0x18, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000a00)=ANY=[@ANYBLOB="8da0250192f09c09c7e728d49230538d393e88d00380c12e076f8f47693b61dad524e3edc46522d1fd57c6524c4f25a7d22c25c70c6cfeaf67f7ec2ad090f7e882a01c83a962e1e3ae8e29ec71f59811d4f8a404dceb9daf595779083863cca26b2d814f486166bf58777019c6411491b937251516a564859e41cf82463e89e46a4ee46a332f8364b0f7ac63ba3a1ecb6d8196e6178022908187c025fc7d483d6764ff806a09acb5c31d770fa487c1fcfcde63cc21200dc4533dfab4ac597574992bdb54f15adc044bbdc25f3c183c8f51d93b0a1097c5c5"], &(0x7f00000006c0)='./file0\x00', &(0x7f0000000b00)='nfs\x00', 0x0, &(0x7f0000000000)) 17:46:48 executing program 2: 17:46:48 executing program 1: 17:46:48 executing program 2: 17:46:48 executing program 3: 17:46:48 executing program 0: 17:46:48 executing program 4: 17:46:49 executing program 4: [ 519.272817][ T27] audit: type=1804 audit(1581788809.074:260): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/220/bus" dev="sda1" ino=17592 res=1 17:46:49 executing program 2: 17:46:49 executing program 3: 17:46:49 executing program 0: 17:46:49 executing program 1: 17:46:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x0) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:49 executing program 4: 17:46:49 executing program 3: 17:46:49 executing program 1: 17:46:49 executing program 0: 17:46:49 executing program 2: 17:46:49 executing program 4: 17:46:49 executing program 3: [ 519.783051][ T27] audit: type=1804 audit(1581788809.584:261): pid=15436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/221/bus" dev="sda1" ino=17568 res=1 17:46:49 executing program 0: 17:46:49 executing program 1: 17:46:49 executing program 2: [ 519.910239][T15431] attempt to access beyond end of device [ 519.933979][T15431] loop5: rw=2049, want=78, limit=63 [ 519.954279][T15431] attempt to access beyond end of device [ 520.004267][T15431] loop5: rw=2049, want=79, limit=63 17:46:49 executing program 4: [ 520.076204][T15431] attempt to access beyond end of device [ 520.118798][T15431] loop5: rw=2049, want=80, limit=63 [ 520.135055][T15431] attempt to access beyond end of device [ 520.199101][T15431] loop5: rw=2049, want=81, limit=63 [ 520.249839][T15431] attempt to access beyond end of device [ 520.255812][T15431] loop5: rw=2049, want=130, limit=63 [ 520.289321][T15431] attempt to access beyond end of device [ 520.295091][T15431] loop5: rw=2049, want=131, limit=63 [ 520.305386][T15431] attempt to access beyond end of device [ 520.311277][T15431] loop5: rw=2049, want=132, limit=63 [ 520.316636][T15431] attempt to access beyond end of device [ 520.329055][T15431] loop5: rw=2049, want=133, limit=63 [ 520.335869][T15431] attempt to access beyond end of device [ 520.345078][T15431] loop5: rw=2049, want=142, limit=63 [ 520.350683][T15431] attempt to access beyond end of device [ 520.356322][T15431] loop5: rw=2049, want=143, limit=63 [ 520.363639][T15431] attempt to access beyond end of device [ 520.369361][T15431] loop5: rw=2049, want=144, limit=63 [ 520.374652][T15431] attempt to access beyond end of device [ 520.382079][T15431] loop5: rw=2049, want=145, limit=63 [ 520.387440][T15431] attempt to access beyond end of device [ 520.393131][T15431] loop5: rw=2049, want=153, limit=63 [ 520.398784][T15436] attempt to access beyond end of device [ 520.405595][T15436] loop5: rw=2049, want=78, limit=63 [ 520.411739][T15436] attempt to access beyond end of device [ 520.417511][T15436] loop5: rw=2049, want=79, limit=63 [ 520.422785][T15436] attempt to access beyond end of device [ 520.428662][T15436] loop5: rw=2049, want=80, limit=63 [ 520.433879][T15436] attempt to access beyond end of device [ 520.439829][T15436] loop5: rw=2049, want=81, limit=63 17:46:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x0) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:50 executing program 0: 17:46:50 executing program 3: 17:46:50 executing program 1: 17:46:50 executing program 2: 17:46:50 executing program 4: 17:46:50 executing program 2: 17:46:50 executing program 3: 17:46:50 executing program 4: 17:46:50 executing program 1: 17:46:50 executing program 4: 17:46:50 executing program 3: [ 520.837702][ T27] audit: type=1804 audit(1581788810.634:262): pid=15465 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/222/bus" dev="sda1" ino=17594 res=1 [ 520.981222][T15465] attempt to access beyond end of device [ 521.015939][T15465] loop5: rw=2049, want=78, limit=63 [ 521.037479][T15465] buffer_io_error: 62 callbacks suppressed [ 521.037492][T15465] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 521.118634][T15465] attempt to access beyond end of device [ 521.124298][T15465] loop5: rw=2049, want=79, limit=63 [ 521.150488][T15465] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 521.159037][T15465] attempt to access beyond end of device [ 521.164821][T15465] loop5: rw=2049, want=80, limit=63 [ 521.170113][T15465] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 521.178640][T15465] attempt to access beyond end of device [ 521.184288][T15465] loop5: rw=2049, want=81, limit=63 [ 521.189558][T15465] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 521.198021][T15465] attempt to access beyond end of device [ 521.203721][T15465] loop5: rw=2049, want=130, limit=63 [ 521.209101][T15465] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 521.217585][T15465] attempt to access beyond end of device [ 521.223290][T15465] loop5: rw=2049, want=131, limit=63 [ 521.228594][T15465] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 521.237185][T15465] attempt to access beyond end of device [ 521.242831][T15465] loop5: rw=2049, want=132, limit=63 [ 521.248155][T15465] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 521.256808][T15465] attempt to access beyond end of device [ 521.262580][T15465] loop5: rw=2049, want=133, limit=63 [ 521.267867][T15465] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 521.276437][T15465] attempt to access beyond end of device [ 521.282086][T15465] loop5: rw=2049, want=142, limit=63 [ 521.287398][T15465] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 521.295909][T15465] attempt to access beyond end of device [ 521.301608][T15465] loop5: rw=2049, want=143, limit=63 [ 521.306904][T15465] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 521.315469][T15465] attempt to access beyond end of device [ 521.321169][T15465] loop5: rw=2049, want=144, limit=63 [ 521.326457][T15465] attempt to access beyond end of device [ 521.332624][T15465] loop5: rw=2049, want=145, limit=63 [ 521.337942][T15465] attempt to access beyond end of device [ 521.343607][T15465] loop5: rw=2049, want=153, limit=63 [ 521.349365][T15477] attempt to access beyond end of device [ 521.355199][T15477] loop5: rw=2049, want=78, limit=63 [ 521.361538][T15477] attempt to access beyond end of device [ 521.367299][T15477] loop5: rw=2049, want=79, limit=63 [ 521.372545][T15477] attempt to access beyond end of device [ 521.378249][T15477] loop5: rw=2049, want=80, limit=63 [ 521.383537][T15477] attempt to access beyond end of device [ 521.389264][T15477] loop5: rw=2049, want=81, limit=63 [ 521.394472][T15477] attempt to access beyond end of device [ 521.400144][T15477] loop5: rw=2049, want=130, limit=63 [ 521.405432][T15477] attempt to access beyond end of device [ 521.411232][T15477] loop5: rw=2049, want=131, limit=63 [ 521.416512][T15477] attempt to access beyond end of device [ 521.422332][T15477] loop5: rw=2049, want=132, limit=63 [ 521.427617][T15477] attempt to access beyond end of device [ 521.433365][T15477] loop5: rw=2049, want=133, limit=63 [ 521.438922][T15477] attempt to access beyond end of device [ 521.444559][T15477] loop5: rw=2049, want=142, limit=63 [ 521.449887][T15477] attempt to access beyond end of device [ 521.455518][T15477] loop5: rw=2049, want=143, limit=63 [ 521.460822][T15477] attempt to access beyond end of device [ 521.466455][T15477] loop5: rw=2049, want=144, limit=63 [ 521.471777][T15477] attempt to access beyond end of device [ 521.477484][T15477] loop5: rw=2049, want=145, limit=63 [ 521.482850][T15477] attempt to access beyond end of device [ 521.488472][T15477] loop5: rw=2049, want=153, limit=63 17:46:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:51 executing program 0: 17:46:51 executing program 2: 17:46:51 executing program 1: 17:46:51 executing program 4: 17:46:51 executing program 3: 17:46:51 executing program 1: 17:46:51 executing program 0: 17:46:51 executing program 3: 17:46:51 executing program 4: 17:46:51 executing program 2: [ 521.890610][ T27] audit: type=1804 audit(1581788811.694:263): pid=15500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/223/bus" dev="sda1" ino=17601 res=1 17:46:51 executing program 3: 17:46:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:51 executing program 1: 17:46:51 executing program 0: 17:46:51 executing program 2: 17:46:51 executing program 4: 17:46:52 executing program 1: 17:46:52 executing program 3: 17:46:52 executing program 0: 17:46:52 executing program 2: 17:46:52 executing program 4: [ 522.428589][ T27] audit: type=1804 audit(1581788812.224:264): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/224/bus" dev="sda1" ino=17600 res=1 [ 522.467192][T15520] attempt to access beyond end of device [ 522.526616][T15520] loop5: rw=2049, want=78, limit=63 17:46:52 executing program 1: 17:46:52 executing program 3: [ 522.564549][T15520] attempt to access beyond end of device [ 522.594609][T15520] loop5: rw=2049, want=79, limit=63 [ 522.641008][T15520] attempt to access beyond end of device [ 522.667761][T15520] loop5: rw=2049, want=80, limit=63 [ 522.693269][T15520] attempt to access beyond end of device [ 522.718811][T15520] loop5: rw=2049, want=81, limit=63 [ 522.724160][T15520] attempt to access beyond end of device [ 522.744157][T15520] loop5: rw=2049, want=130, limit=63 [ 522.766633][T15520] attempt to access beyond end of device [ 522.788671][T15520] loop5: rw=2049, want=131, limit=63 [ 522.850867][T15520] attempt to access beyond end of device [ 522.861473][T15520] loop5: rw=2049, want=132, limit=63 [ 522.876353][T15520] attempt to access beyond end of device [ 522.884953][T15520] loop5: rw=2049, want=133, limit=63 [ 522.890556][T15520] attempt to access beyond end of device [ 522.896292][T15520] loop5: rw=2049, want=142, limit=63 [ 522.904991][T15520] attempt to access beyond end of device [ 522.911044][T15520] loop5: rw=2049, want=143, limit=63 [ 522.916406][T15520] attempt to access beyond end of device [ 522.922966][T15520] loop5: rw=2049, want=144, limit=63 [ 522.928302][T15520] attempt to access beyond end of device [ 522.934123][T15520] loop5: rw=2049, want=145, limit=63 [ 522.939566][T15520] attempt to access beyond end of device [ 522.945210][T15520] loop5: rw=2049, want=153, limit=63 [ 522.950933][T15528] attempt to access beyond end of device [ 522.956689][T15528] loop5: rw=2049, want=78, limit=63 [ 522.962617][T15528] attempt to access beyond end of device [ 522.968297][T15528] loop5: rw=2049, want=79, limit=63 [ 522.974439][T15528] attempt to access beyond end of device [ 522.980348][T15528] loop5: rw=2049, want=80, limit=63 [ 522.985537][T15528] attempt to access beyond end of device [ 522.991217][T15528] loop5: rw=2049, want=81, limit=63 [ 522.996426][T15528] attempt to access beyond end of device [ 523.002102][T15528] loop5: rw=2049, want=130, limit=63 [ 523.007407][T15528] attempt to access beyond end of device [ 523.013074][T15528] loop5: rw=2049, want=131, limit=63 [ 523.018413][T15528] attempt to access beyond end of device [ 523.024145][T15528] loop5: rw=2049, want=132, limit=63 [ 523.029453][T15528] attempt to access beyond end of device [ 523.035074][T15528] loop5: rw=2049, want=133, limit=63 [ 523.040390][T15528] attempt to access beyond end of device [ 523.046059][T15528] loop5: rw=2049, want=142, limit=63 [ 523.051385][T15528] attempt to access beyond end of device [ 523.057097][T15528] loop5: rw=2049, want=143, limit=63 [ 523.062443][T15528] attempt to access beyond end of device [ 523.068150][T15528] loop5: rw=2049, want=144, limit=63 [ 523.073600][T15528] attempt to access beyond end of device [ 523.080325][T15528] loop5: rw=2049, want=145, limit=63 [ 523.085703][T15528] attempt to access beyond end of device [ 523.091363][T15528] loop5: rw=2049, want=153, limit=63 17:46:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:46:53 executing program 0: 17:46:53 executing program 4: 17:46:53 executing program 3: 17:46:53 executing program 2: 17:46:53 executing program 1: 17:46:53 executing program 3: 17:46:53 executing program 0: 17:46:53 executing program 1: 17:46:53 executing program 2: 17:46:53 executing program 4: [ 523.462778][ T27] audit: type=1804 audit(1581788813.264:265): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/225/bus" dev="sda1" ino=16529 res=1 17:46:53 executing program 1: [ 523.561929][T15551] attempt to access beyond end of device [ 523.573211][T15551] loop5: rw=2049, want=78, limit=63 [ 523.598615][T15551] attempt to access beyond end of device [ 523.629181][T15551] loop5: rw=2049, want=79, limit=63 [ 523.683698][T15551] attempt to access beyond end of device [ 523.698594][T15551] loop5: rw=2049, want=80, limit=63 [ 523.703832][T15551] attempt to access beyond end of device [ 523.759366][T15551] loop5: rw=2049, want=81, limit=63 [ 523.774019][T15551] attempt to access beyond end of device [ 523.779991][T15551] loop5: rw=2049, want=130, limit=63 [ 523.785401][T15551] attempt to access beyond end of device [ 523.791094][T15551] loop5: rw=2049, want=131, limit=63 [ 523.796438][T15551] attempt to access beyond end of device [ 523.802154][T15551] loop5: rw=2049, want=132, limit=63 [ 523.807552][T15551] attempt to access beyond end of device [ 523.813352][T15551] loop5: rw=2049, want=133, limit=63 [ 523.818730][T15551] attempt to access beyond end of device [ 523.824368][T15551] loop5: rw=2049, want=142, limit=63 [ 523.829704][T15551] attempt to access beyond end of device [ 523.835337][T15551] loop5: rw=2049, want=143, limit=63 [ 523.841173][T15551] attempt to access beyond end of device [ 523.846848][T15551] loop5: rw=2049, want=144, limit=63 [ 523.852894][T15551] attempt to access beyond end of device [ 523.858568][T15551] loop5: rw=2049, want=145, limit=63 [ 523.863868][T15551] attempt to access beyond end of device [ 523.869536][T15551] loop5: rw=2049, want=153, limit=63 17:46:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, 0x0, 0x0, 0x20) 17:46:53 executing program 4: 17:46:53 executing program 3: 17:46:53 executing program 2: 17:46:53 executing program 1: 17:46:53 executing program 0: 17:46:53 executing program 3: 17:46:53 executing program 4: 17:46:53 executing program 2: 17:46:53 executing program 0: 17:46:53 executing program 1: [ 524.199514][ T27] audit: type=1804 audit(1581788814.004:266): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/226/bus" dev="sda1" ino=16561 res=1 [ 524.275136][T15578] attempt to access beyond end of device 17:46:54 executing program 4: [ 524.358730][T15578] loop5: rw=2049, want=78, limit=63 [ 524.441218][T15578] attempt to access beyond end of device [ 524.446897][T15578] loop5: rw=2049, want=79, limit=63 [ 524.522846][T15578] attempt to access beyond end of device [ 524.556372][T15578] loop5: rw=2049, want=80, limit=63 [ 524.564307][T15578] attempt to access beyond end of device [ 524.572995][T15578] loop5: rw=2049, want=81, limit=63 [ 524.578929][T15578] attempt to access beyond end of device [ 524.584688][T15578] loop5: rw=2049, want=130, limit=63 [ 524.592587][T15578] attempt to access beyond end of device [ 524.598280][T15578] loop5: rw=2049, want=131, limit=63 [ 524.604080][T15578] attempt to access beyond end of device [ 524.610876][T15578] loop5: rw=2049, want=132, limit=63 [ 524.616267][T15578] attempt to access beyond end of device [ 524.622644][T15578] loop5: rw=2049, want=133, limit=63 [ 524.628039][T15578] attempt to access beyond end of device [ 524.633753][T15578] loop5: rw=2049, want=142, limit=63 [ 524.639071][T15578] attempt to access beyond end of device [ 524.644704][T15578] loop5: rw=2049, want=143, limit=63 [ 524.650005][T15578] attempt to access beyond end of device [ 524.655637][T15578] loop5: rw=2049, want=144, limit=63 [ 524.660958][T15578] attempt to access beyond end of device [ 524.666591][T15578] loop5: rw=2049, want=145, limit=63 [ 524.672286][T15578] attempt to access beyond end of device [ 524.677905][T15578] loop5: rw=2049, want=153, limit=63 [ 524.683818][T15584] attempt to access beyond end of device [ 524.690612][T15584] loop5: rw=2049, want=78, limit=63 [ 524.695823][T15584] attempt to access beyond end of device [ 524.703140][T15584] loop5: rw=2049, want=79, limit=63 [ 524.708380][T15584] attempt to access beyond end of device [ 524.714071][T15584] loop5: rw=2049, want=80, limit=63 [ 524.719519][T15584] attempt to access beyond end of device [ 524.725172][T15584] loop5: rw=2049, want=81, limit=63 17:46:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, 0x0, 0x0, 0x20) 17:46:54 executing program 0: 17:46:54 executing program 3: 17:46:54 executing program 1: 17:46:54 executing program 2: 17:46:54 executing program 4: 17:46:54 executing program 1: 17:46:54 executing program 2: 17:46:54 executing program 3: 17:46:54 executing program 0: 17:46:54 executing program 4: 17:46:54 executing program 0: [ 525.057579][ T27] audit: type=1804 audit(1581788814.854:267): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/227/bus" dev="sda1" ino=16593 res=1 17:46:55 executing program 1: 17:46:55 executing program 2: 17:46:55 executing program 3: 17:46:55 executing program 0: 17:46:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, 0x0, 0x0, 0x20) 17:46:55 executing program 4: 17:46:55 executing program 3: 17:46:55 executing program 2: 17:46:55 executing program 1: 17:46:55 executing program 4: 17:46:55 executing program 0: [ 525.616109][ T27] audit: type=1804 audit(1581788815.414:268): pid=15637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/228/bus" dev="sda1" ino=16545 res=1 17:46:55 executing program 2: 17:46:55 executing program 3: [ 525.693073][T15637] attempt to access beyond end of device [ 525.744078][T15637] loop5: rw=2049, want=78, limit=63 17:46:55 executing program 1: 17:46:55 executing program 4: 17:46:55 executing program 0: [ 525.804986][T15637] attempt to access beyond end of device [ 525.838764][T15637] loop5: rw=2049, want=79, limit=63 [ 525.892835][T15637] attempt to access beyond end of device [ 525.933994][T15637] loop5: rw=2049, want=80, limit=63 [ 525.948726][T15637] attempt to access beyond end of device [ 525.989683][T15637] loop5: rw=2049, want=81, limit=63 [ 526.008759][T15637] attempt to access beyond end of device [ 526.036150][T15637] loop5: rw=2049, want=130, limit=63 [ 526.054988][T15637] buffer_io_error: 70 callbacks suppressed [ 526.055001][T15637] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 526.120915][T15637] attempt to access beyond end of device [ 526.126636][T15637] loop5: rw=2049, want=131, limit=63 [ 526.133804][T15637] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 526.142628][T15637] attempt to access beyond end of device [ 526.148289][T15637] loop5: rw=2049, want=132, limit=63 [ 526.153705][T15637] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 526.162993][T15637] attempt to access beyond end of device [ 526.168648][T15637] loop5: rw=2049, want=133, limit=63 [ 526.173980][T15637] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 526.182533][T15637] attempt to access beyond end of device [ 526.188155][T15637] loop5: rw=2049, want=142, limit=63 [ 526.193517][T15637] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 526.202078][T15637] attempt to access beyond end of device [ 526.207862][T15637] loop5: rw=2049, want=143, limit=63 [ 526.213228][T15637] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 526.221773][T15637] attempt to access beyond end of device [ 526.227468][T15637] loop5: rw=2049, want=144, limit=63 [ 526.233209][T15637] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 526.241794][T15637] attempt to access beyond end of device [ 526.247465][T15637] loop5: rw=2049, want=145, limit=63 [ 526.252808][T15637] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 526.261350][T15637] attempt to access beyond end of device [ 526.266983][T15637] loop5: rw=2049, want=153, limit=63 [ 526.273449][T15648] attempt to access beyond end of device [ 526.279167][T15648] loop5: rw=2049, want=78, limit=63 [ 526.284463][T15648] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 526.293583][T15648] attempt to access beyond end of device [ 526.299357][T15648] loop5: rw=2049, want=79, limit=63 [ 526.304553][T15648] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 526.313002][T15648] attempt to access beyond end of device [ 526.318656][T15648] loop5: rw=2049, want=80, limit=63 [ 526.323959][T15648] attempt to access beyond end of device [ 526.329739][T15648] loop5: rw=2049, want=81, limit=63 17:46:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:46:56 executing program 3: 17:46:56 executing program 2: 17:46:56 executing program 0: 17:46:56 executing program 1: 17:46:56 executing program 4: 17:46:56 executing program 2: 17:46:56 executing program 1: 17:46:56 executing program 3: 17:46:56 executing program 4: 17:46:56 executing program 0: [ 526.685495][ T27] audit: type=1804 audit(1581788816.484:269): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/229/bus" dev="sda1" ino=17121 res=1 17:46:56 executing program 0: [ 526.772625][ T27] audit: type=1804 audit(1581788816.514:270): pid=15671 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/229/bus" dev="sda1" ino=17121 res=1 [ 526.774675][T15671] attempt to access beyond end of device [ 526.954305][T15671] loop5: rw=2049, want=78, limit=63 [ 526.959984][T15671] attempt to access beyond end of device [ 526.985264][T15671] loop5: rw=2049, want=79, limit=63 [ 526.991690][T15671] attempt to access beyond end of device [ 527.001393][T15671] loop5: rw=2049, want=80, limit=63 [ 527.006644][T15671] attempt to access beyond end of device [ 527.012359][T15671] loop5: rw=2049, want=81, limit=63 [ 527.018598][T15671] attempt to access beyond end of device [ 527.024294][T15671] loop5: rw=2049, want=130, limit=63 [ 527.029674][T15671] attempt to access beyond end of device [ 527.035388][T15671] loop5: rw=2049, want=131, limit=63 [ 527.040832][T15671] attempt to access beyond end of device [ 527.046469][T15671] loop5: rw=2049, want=132, limit=63 [ 527.052483][T15671] attempt to access beyond end of device [ 527.058168][T15671] loop5: rw=2049, want=133, limit=63 [ 527.063544][T15671] attempt to access beyond end of device [ 527.069235][T15671] loop5: rw=2049, want=142, limit=63 [ 527.074660][T15671] attempt to access beyond end of device [ 527.080498][T15671] loop5: rw=2049, want=143, limit=63 [ 527.085804][T15671] attempt to access beyond end of device [ 527.091527][T15671] loop5: rw=2049, want=144, limit=63 [ 527.096856][T15671] attempt to access beyond end of device [ 527.102507][T15671] loop5: rw=2049, want=145, limit=63 [ 527.107924][T15671] attempt to access beyond end of device [ 527.113704][T15671] loop5: rw=2049, want=153, limit=63 [ 527.119378][T15679] attempt to access beyond end of device [ 527.124998][T15679] loop5: rw=2049, want=78, limit=63 [ 527.130297][T15679] attempt to access beyond end of device [ 527.135940][T15679] loop5: rw=2049, want=79, limit=63 [ 527.141250][T15679] attempt to access beyond end of device [ 527.146929][T15679] loop5: rw=2049, want=80, limit=63 [ 527.152199][T15679] attempt to access beyond end of device [ 527.157877][T15679] loop5: rw=2049, want=81, limit=63 [ 527.163166][T15679] attempt to access beyond end of device [ 527.168880][T15679] loop5: rw=2049, want=130, limit=63 [ 527.174227][T15679] attempt to access beyond end of device [ 527.179897][T15679] loop5: rw=2049, want=131, limit=63 [ 527.185187][T15679] attempt to access beyond end of device [ 527.190869][T15679] loop5: rw=2049, want=132, limit=63 [ 527.196280][T15679] attempt to access beyond end of device [ 527.201958][T15679] loop5: rw=2049, want=133, limit=63 [ 527.207251][T15679] attempt to access beyond end of device [ 527.212956][T15679] loop5: rw=2049, want=142, limit=63 [ 527.218284][T15679] attempt to access beyond end of device [ 527.224014][T15679] loop5: rw=2049, want=143, limit=63 [ 527.229339][T15679] attempt to access beyond end of device [ 527.234963][T15679] loop5: rw=2049, want=144, limit=63 [ 527.240266][T15679] attempt to access beyond end of device [ 527.245969][T15679] loop5: rw=2049, want=145, limit=63 [ 527.251380][T15679] attempt to access beyond end of device [ 527.257021][T15679] loop5: rw=2049, want=153, limit=63 17:46:57 executing program 1: 17:46:57 executing program 2: 17:46:57 executing program 0: 17:46:57 executing program 3: 17:46:57 executing program 4: 17:46:57 executing program 5: 17:46:57 executing program 4: 17:46:57 executing program 1: 17:46:57 executing program 2: 17:46:57 executing program 3: 17:46:57 executing program 0: 17:46:57 executing program 5: 17:46:57 executing program 2: 17:46:57 executing program 3: 17:46:57 executing program 4: 17:46:57 executing program 1: 17:46:57 executing program 0: 17:46:57 executing program 5: 17:46:57 executing program 3: 17:46:57 executing program 1: 17:46:57 executing program 2: 17:46:57 executing program 0: 17:46:57 executing program 3: 17:46:58 executing program 5: 17:46:58 executing program 4: 17:46:58 executing program 1: 17:46:58 executing program 2: 17:46:58 executing program 3: 17:46:58 executing program 0: 17:46:58 executing program 5: 17:46:58 executing program 4: 17:46:58 executing program 2: 17:46:58 executing program 1: 17:46:58 executing program 3: 17:46:58 executing program 0: 17:46:58 executing program 4: 17:46:58 executing program 5: 17:46:58 executing program 2: 17:46:58 executing program 1: 17:46:58 executing program 0: 17:46:58 executing program 3: 17:46:58 executing program 4: 17:46:58 executing program 5: 17:46:58 executing program 1: 17:46:59 executing program 2: 17:46:59 executing program 3: 17:46:59 executing program 4: 17:46:59 executing program 0: 17:46:59 executing program 1: 17:46:59 executing program 5: 17:46:59 executing program 3: 17:46:59 executing program 2: 17:46:59 executing program 0: 17:46:59 executing program 4: 17:46:59 executing program 1: 17:46:59 executing program 5: 17:46:59 executing program 3: 17:46:59 executing program 2: 17:46:59 executing program 0: 17:46:59 executing program 4: 17:46:59 executing program 3: 17:46:59 executing program 1: 17:46:59 executing program 5: 17:46:59 executing program 2: 17:46:59 executing program 4: 17:46:59 executing program 1: 17:46:59 executing program 0: 17:47:00 executing program 3: 17:47:00 executing program 2: 17:47:00 executing program 5: 17:47:00 executing program 4: 17:47:00 executing program 1: 17:47:00 executing program 2: 17:47:00 executing program 5: 17:47:00 executing program 0: 17:47:00 executing program 3: 17:47:00 executing program 4: 17:47:00 executing program 2: 17:47:00 executing program 0: 17:47:00 executing program 5: 17:47:00 executing program 1: 17:47:00 executing program 3: 17:47:00 executing program 2: 17:47:00 executing program 4: 17:47:00 executing program 1: 17:47:00 executing program 0: 17:47:00 executing program 5: 17:47:00 executing program 3: 17:47:01 executing program 2: 17:47:01 executing program 4: 17:47:01 executing program 1: 17:47:01 executing program 0: 17:47:01 executing program 3: 17:47:01 executing program 5: 17:47:01 executing program 4: 17:47:01 executing program 2: 17:47:01 executing program 1: 17:47:01 executing program 0: 17:47:01 executing program 3: 17:47:01 executing program 5: 17:47:01 executing program 4: 17:47:01 executing program 1: 17:47:01 executing program 3: 17:47:01 executing program 2: 17:47:01 executing program 0: 17:47:01 executing program 4: 17:47:01 executing program 5: 17:47:01 executing program 1: 17:47:01 executing program 2: 17:47:02 executing program 0: 17:47:02 executing program 5: 17:47:02 executing program 3: 17:47:02 executing program 2: 17:47:02 executing program 4: 17:47:02 executing program 1: 17:47:02 executing program 0: 17:47:02 executing program 5: 17:47:02 executing program 3: 17:47:02 executing program 4: 17:47:02 executing program 2: 17:47:02 executing program 1: 17:47:02 executing program 0: 17:47:02 executing program 4: 17:47:02 executing program 5: 17:47:02 executing program 3: 17:47:02 executing program 2: 17:47:02 executing program 1: 17:47:02 executing program 5: 17:47:02 executing program 4: 17:47:02 executing program 3: 17:47:02 executing program 0: 17:47:02 executing program 2: 17:47:03 executing program 1: 17:47:03 executing program 2: 17:47:03 executing program 5: 17:47:03 executing program 0: 17:47:03 executing program 3: 17:47:03 executing program 4: 17:47:03 executing program 1: 17:47:03 executing program 2: 17:47:03 executing program 0: 17:47:03 executing program 5: 17:47:03 executing program 3: 17:47:03 executing program 4: 17:47:03 executing program 1: 17:47:03 executing program 0: 17:47:03 executing program 2: 17:47:03 executing program 3: 17:47:03 executing program 5: 17:47:03 executing program 4: 17:47:03 executing program 2: 17:47:04 executing program 1: 17:47:04 executing program 0: 17:47:04 executing program 3: 17:47:04 executing program 5: 17:47:04 executing program 4: 17:47:04 executing program 1: 17:47:04 executing program 2: 17:47:04 executing program 3: 17:47:04 executing program 0: 17:47:04 executing program 5: 17:47:04 executing program 4: 17:47:04 executing program 2: 17:47:04 executing program 1: 17:47:04 executing program 3: 17:47:04 executing program 5: 17:47:04 executing program 0: 17:47:04 executing program 4: 17:47:04 executing program 2: 17:47:04 executing program 1: 17:47:04 executing program 3: 17:47:04 executing program 5: 17:47:05 executing program 0: 17:47:05 executing program 4: 17:47:05 executing program 2: 17:47:05 executing program 1: 17:47:05 executing program 3: 17:47:05 executing program 5: 17:47:05 executing program 4: 17:47:05 executing program 0: 17:47:05 executing program 2: 17:47:05 executing program 3: 17:47:05 executing program 5: 17:47:05 executing program 1: 17:47:05 executing program 4: 17:47:05 executing program 0: 17:47:05 executing program 2: 17:47:05 executing program 5: 17:47:05 executing program 3: 17:47:05 executing program 1: 17:47:05 executing program 0: 17:47:05 executing program 4: 17:47:06 executing program 5: 17:47:06 executing program 2: 17:47:06 executing program 3: 17:47:06 executing program 4: 17:47:06 executing program 1: 17:47:06 executing program 0: 17:47:06 executing program 5: 17:47:06 executing program 3: 17:47:06 executing program 2: 17:47:06 executing program 0: 17:47:06 executing program 4: 17:47:06 executing program 1: 17:47:06 executing program 3: 17:47:06 executing program 5: 17:47:06 executing program 2: 17:47:06 executing program 4: 17:47:06 executing program 0: 17:47:06 executing program 3: 17:47:06 executing program 1: 17:47:06 executing program 5: 17:47:06 executing program 2: 17:47:06 executing program 4: 17:47:07 executing program 0: 17:47:07 executing program 3: 17:47:07 executing program 1: 17:47:07 executing program 5: 17:47:07 executing program 4: 17:47:07 executing program 2: 17:47:07 executing program 0: 17:47:07 executing program 3: 17:47:07 executing program 1: 17:47:07 executing program 2: 17:47:07 executing program 0: 17:47:07 executing program 5: 17:47:07 executing program 4: 17:47:07 executing program 3: 17:47:07 executing program 1: 17:47:07 executing program 0: 17:47:07 executing program 4: 17:47:07 executing program 5: 17:47:07 executing program 2: 17:47:07 executing program 3: 17:47:08 executing program 0: 17:47:08 executing program 1: 17:47:08 executing program 4: 17:47:08 executing program 5: 17:47:08 executing program 2: 17:47:08 executing program 5: 17:47:08 executing program 4: 17:47:08 executing program 3: 17:47:08 executing program 1: 17:47:08 executing program 0: 17:47:08 executing program 2: 17:47:08 executing program 5: 17:47:08 executing program 4: 17:47:08 executing program 1: 17:47:08 executing program 2: 17:47:08 executing program 0: 17:47:08 executing program 3: 17:47:08 executing program 1: 17:47:08 executing program 5: 17:47:08 executing program 0: 17:47:08 executing program 2: 17:47:08 executing program 3: 17:47:09 executing program 4: 17:47:09 executing program 1: 17:47:09 executing program 5: 17:47:09 executing program 2: 17:47:09 executing program 3: 17:47:09 executing program 0: 17:47:09 executing program 4: 17:47:09 executing program 1: 17:47:09 executing program 0: 17:47:09 executing program 3: 17:47:09 executing program 5: 17:47:09 executing program 2: 17:47:09 executing program 1: 17:47:09 executing program 4: 17:47:09 executing program 0: 17:47:09 executing program 5: 17:47:09 executing program 2: 17:47:09 executing program 4: 17:47:09 executing program 3: 17:47:09 executing program 1: 17:47:09 executing program 0: 17:47:10 executing program 5: 17:47:10 executing program 4: 17:47:10 executing program 3: 17:47:10 executing program 2: 17:47:10 executing program 0: 17:47:10 executing program 1: 17:47:10 executing program 5: 17:47:10 executing program 4: 17:47:10 executing program 0: 17:47:10 executing program 3: 17:47:10 executing program 2: 17:47:10 executing program 1: 17:47:10 executing program 5: 17:47:10 executing program 0: 17:47:10 executing program 4: 17:47:10 executing program 1: 17:47:10 executing program 3: 17:47:10 executing program 5: 17:47:10 executing program 2: 17:47:10 executing program 4: 17:47:11 executing program 0: 17:47:11 executing program 1: 17:47:11 executing program 5: 17:47:11 executing program 3: 17:47:11 executing program 0: 17:47:11 executing program 4: 17:47:11 executing program 2: 17:47:11 executing program 5: 17:47:11 executing program 1: 17:47:11 executing program 3: 17:47:11 executing program 4: 17:47:11 executing program 0: 17:47:11 executing program 2: 17:47:11 executing program 5: 17:47:11 executing program 1: 17:47:11 executing program 3: 17:47:11 executing program 4: 17:47:11 executing program 2: 17:47:11 executing program 0: 17:47:11 executing program 5: 17:47:11 executing program 1: 17:47:12 executing program 3: 17:47:12 executing program 5: 17:47:12 executing program 2: 17:47:12 executing program 4: 17:47:12 executing program 3: 17:47:12 executing program 0: 17:47:12 executing program 1: 17:47:12 executing program 0: 17:47:12 executing program 4: 17:47:12 executing program 1: 17:47:12 executing program 5: 17:47:12 executing program 3: 17:47:12 executing program 2: 17:47:12 executing program 0: 17:47:12 executing program 1: 17:47:12 executing program 5: 17:47:12 executing program 3: 17:47:12 executing program 4: 17:47:12 executing program 2: 17:47:12 executing program 0: 17:47:13 executing program 3: 17:47:13 executing program 5: 17:47:13 executing program 1: 17:47:13 executing program 4: 17:47:13 executing program 2: 17:47:13 executing program 3: 17:47:13 executing program 0: 17:47:13 executing program 5: 17:47:13 executing program 1: 17:47:13 executing program 4: 17:47:13 executing program 3: 17:47:13 executing program 2: 17:47:13 executing program 0: 17:47:13 executing program 1: 17:47:13 executing program 5: 17:47:13 executing program 4: 17:47:13 executing program 3: 17:47:13 executing program 1: 17:47:13 executing program 0: 17:47:13 executing program 2: 17:47:13 executing program 5: 17:47:14 executing program 4: 17:47:14 executing program 3: 17:47:14 executing program 2: 17:47:14 executing program 1: 17:47:14 executing program 0: 17:47:14 executing program 4: 17:47:14 executing program 5: 17:47:14 executing program 3: 17:47:14 executing program 0: 17:47:14 executing program 1: 17:47:14 executing program 2: 17:47:14 executing program 4: 17:47:14 executing program 5: 17:47:14 executing program 3: 17:47:14 executing program 0: 17:47:14 executing program 1: 17:47:14 executing program 2: 17:47:14 executing program 3: 17:47:14 executing program 4: 17:47:14 executing program 5: 17:47:14 executing program 0: 17:47:15 executing program 1: 17:47:15 executing program 3: 17:47:15 executing program 2: 17:47:15 executing program 4: 17:47:15 executing program 0: 17:47:15 executing program 5: 17:47:15 executing program 3: 17:47:15 executing program 2: 17:47:15 executing program 4: 17:47:15 executing program 1: 17:47:15 executing program 5: 17:47:15 executing program 0: 17:47:15 executing program 4: 17:47:15 executing program 2: 17:47:15 executing program 3: 17:47:15 executing program 0: 17:47:15 executing program 1: 17:47:15 executing program 5: 17:47:15 executing program 4: 17:47:16 executing program 2: 17:47:16 executing program 3: 17:47:16 executing program 1: 17:47:16 executing program 0: 17:47:16 executing program 5: 17:47:16 executing program 4: 17:47:16 executing program 2: 17:47:16 executing program 1: 17:47:16 executing program 0: 17:47:16 executing program 5: 17:47:16 executing program 3: 17:47:16 executing program 4: 17:47:16 executing program 1: 17:47:16 executing program 5: 17:47:16 executing program 0: 17:47:16 executing program 2: 17:47:16 executing program 3: 17:47:16 executing program 4: 17:47:16 executing program 1: 17:47:16 executing program 3: 17:47:16 executing program 5: 17:47:16 executing program 0: 17:47:17 executing program 2: 17:47:17 executing program 4: 17:47:17 executing program 1: 17:47:17 executing program 5: 17:47:17 executing program 0: 17:47:17 executing program 2: 17:47:17 executing program 3: 17:47:17 executing program 4: 17:47:17 executing program 5: 17:47:17 executing program 1: 17:47:17 executing program 2: 17:47:17 executing program 4: 17:47:17 executing program 0: 17:47:17 executing program 5: 17:47:17 executing program 3: 17:47:17 executing program 1: 17:47:17 executing program 2: 17:47:17 executing program 4: 17:47:17 executing program 0: 17:47:17 executing program 5: 17:47:18 executing program 1: 17:47:18 executing program 3: 17:47:18 executing program 2: 17:47:18 executing program 5: 17:47:18 executing program 4: 17:47:18 executing program 3: 17:47:18 executing program 0: 17:47:18 executing program 1: 17:47:18 executing program 2: 17:47:18 executing program 5: 17:47:18 executing program 4: 17:47:18 executing program 0: 17:47:18 executing program 1: 17:47:18 executing program 2: 17:47:18 executing program 3: 17:47:18 executing program 5: 17:47:18 executing program 4: 17:47:18 executing program 0: 17:47:18 executing program 2: 17:47:18 executing program 5: 17:47:19 executing program 4: 17:47:19 executing program 3: 17:47:19 executing program 1: 17:47:19 executing program 0: 17:47:19 executing program 5: 17:47:19 executing program 2: 17:47:19 executing program 4: 17:47:19 executing program 0: 17:47:19 executing program 3: 17:47:19 executing program 1: 17:47:19 executing program 2: 17:47:19 executing program 5: 17:47:19 executing program 4: 17:47:19 executing program 0: 17:47:19 executing program 3: 17:47:19 executing program 4: 17:47:19 executing program 2: 17:47:19 executing program 1: 17:47:19 executing program 5: 17:47:19 executing program 0: 17:47:19 executing program 3: 17:47:20 executing program 2: 17:47:20 executing program 4: 17:47:20 executing program 1: 17:47:20 executing program 5: 17:47:20 executing program 0: 17:47:20 executing program 4: 17:47:20 executing program 3: 17:47:20 executing program 5: 17:47:20 executing program 1: 17:47:20 executing program 0: 17:47:20 executing program 2: 17:47:20 executing program 5: 17:47:20 executing program 4: 17:47:20 executing program 3: 17:47:20 executing program 0: 17:47:20 executing program 1: 17:47:20 executing program 2: 17:47:20 executing program 5: 17:47:20 executing program 4: 17:47:20 executing program 0: 17:47:20 executing program 3: 17:47:21 executing program 1: 17:47:21 executing program 2: 17:47:21 executing program 3: 17:47:21 executing program 4: 17:47:21 executing program 0: 17:47:21 executing program 5: 17:47:21 executing program 1: 17:47:21 executing program 2: 17:47:21 executing program 3: 17:47:21 executing program 4: 17:47:21 executing program 1: 17:47:21 executing program 0: 17:47:21 executing program 5: 17:47:21 executing program 2: 17:47:21 executing program 3: 17:47:21 executing program 4: 17:47:21 executing program 1: 17:47:21 executing program 2: 17:47:21 executing program 0: 17:47:21 executing program 5: 17:47:22 executing program 3: 17:47:22 executing program 4: 17:47:22 executing program 1: 17:47:22 executing program 0: 17:47:22 executing program 5: 17:47:22 executing program 2: 17:47:22 executing program 4: 17:47:22 executing program 3: 17:47:22 executing program 1: 17:47:22 executing program 0: 17:47:22 executing program 5: 17:47:22 executing program 2: 17:47:22 executing program 4: 17:47:22 executing program 3: 17:47:22 executing program 1: 17:47:22 executing program 5: 17:47:22 executing program 2: 17:47:22 executing program 0: 17:47:22 executing program 3: 17:47:22 executing program 1: 17:47:22 executing program 4: 17:47:23 executing program 5: 17:47:23 executing program 2: 17:47:23 executing program 0: 17:47:23 executing program 3: 17:47:23 executing program 1: 17:47:23 executing program 4: 17:47:23 executing program 5: 17:47:23 executing program 0: 17:47:23 executing program 3: 17:47:23 executing program 2: 17:47:23 executing program 1: 17:47:23 executing program 5: 17:47:23 executing program 0: 17:47:23 executing program 4: 17:47:23 executing program 3: 17:47:23 executing program 2: 17:47:23 executing program 0: 17:47:23 executing program 1: 17:47:23 executing program 4: 17:47:23 executing program 5: 17:47:23 executing program 2: 17:47:24 executing program 3: 17:47:24 executing program 1: 17:47:24 executing program 4: 17:47:24 executing program 0: 17:47:24 executing program 5: 17:47:24 executing program 2: 17:47:24 executing program 3: 17:47:24 executing program 1: 17:47:24 executing program 0: 17:47:24 executing program 5: 17:47:24 executing program 4: 17:47:24 executing program 3: 17:47:24 executing program 2: 17:47:24 executing program 0: 17:47:24 executing program 1: 17:47:24 executing program 5: 17:47:24 executing program 4: 17:47:24 executing program 3: 17:47:24 executing program 2: 17:47:24 executing program 1: 17:47:24 executing program 0: 17:47:24 executing program 5: 17:47:24 executing program 4: 17:47:25 executing program 3: 17:47:25 executing program 2: 17:47:25 executing program 4: 17:47:25 executing program 1: 17:47:25 executing program 5: 17:47:25 executing program 0: 17:47:25 executing program 3: 17:47:25 executing program 2: 17:47:25 executing program 4: 17:47:25 executing program 1: 17:47:25 executing program 5: 17:47:25 executing program 0: 17:47:25 executing program 4: 17:47:25 executing program 3: 17:47:25 executing program 2: 17:47:25 executing program 5: 17:47:25 executing program 1: 17:47:25 executing program 3: 17:47:25 executing program 4: 17:47:25 executing program 2: 17:47:25 executing program 0: 17:47:25 executing program 5: 17:47:25 executing program 1: 17:47:26 executing program 3: 17:47:26 executing program 4: 17:47:26 executing program 2: 17:47:26 executing program 0: 17:47:26 executing program 5: 17:47:26 executing program 3: 17:47:26 executing program 4: 17:47:26 executing program 1: 17:47:26 executing program 2: 17:47:26 executing program 0: 17:47:26 executing program 5: 17:47:26 executing program 4: 17:47:26 executing program 3: 17:47:26 executing program 1: 17:47:26 executing program 2: 17:47:26 executing program 0: 17:47:26 executing program 5: 17:47:26 executing program 4: 17:47:26 executing program 1: 17:47:26 executing program 3: 17:47:26 executing program 0: 17:47:26 executing program 2: 17:47:27 executing program 5: 17:47:27 executing program 4: 17:47:27 executing program 0: 17:47:27 executing program 2: 17:47:27 executing program 3: 17:47:27 executing program 1: 17:47:27 executing program 4: 17:47:27 executing program 5: 17:47:27 executing program 0: 17:47:27 executing program 3: 17:47:27 executing program 2: 17:47:27 executing program 1: 17:47:27 executing program 0: 17:47:27 executing program 5: 17:47:27 executing program 2: 17:47:27 executing program 4: 17:47:27 executing program 3: 17:47:27 executing program 0: 17:47:27 executing program 1: 17:47:27 executing program 2: 17:47:27 executing program 4: 17:47:27 executing program 3: 17:47:27 executing program 5: 17:47:27 executing program 1: 17:47:27 executing program 2: 17:47:28 executing program 0: 17:47:28 executing program 5: 17:47:28 executing program 3: 17:47:28 executing program 4: 17:47:28 executing program 1: 17:47:28 executing program 2: 17:47:28 executing program 0: 17:47:28 executing program 4: 17:47:28 executing program 5: 17:47:28 executing program 3: 17:47:28 executing program 1: 17:47:28 executing program 4: 17:47:28 executing program 2: 17:47:28 executing program 0: 17:47:28 executing program 5: 17:47:28 executing program 3: 17:47:28 executing program 4: 17:47:28 executing program 1: 17:47:28 executing program 0: 17:47:28 executing program 2: 17:47:28 executing program 5: 17:47:28 executing program 3: 17:47:28 executing program 4: 17:47:29 executing program 1: 17:47:29 executing program 2: 17:47:29 executing program 0: 17:47:29 executing program 3: 17:47:29 executing program 4: 17:47:29 executing program 5: 17:47:29 executing program 1: 17:47:29 executing program 2: 17:47:29 executing program 0: 17:47:29 executing program 3: 17:47:29 executing program 4: 17:47:29 executing program 5: 17:47:29 executing program 2: 17:47:29 executing program 1: 17:47:29 executing program 2: 17:47:29 executing program 3: 17:47:29 executing program 4: 17:47:29 executing program 1: 17:47:29 executing program 0: 17:47:29 executing program 5: 17:47:29 executing program 3: 17:47:29 executing program 2: 17:47:30 executing program 0: 17:47:30 executing program 4: 17:47:30 executing program 1: 17:47:30 executing program 5: 17:47:30 executing program 3: 17:47:30 executing program 2: 17:47:30 executing program 0: 17:47:30 executing program 5: 17:47:30 executing program 4: 17:47:30 executing program 1: 17:47:30 executing program 3: 17:47:30 executing program 2: 17:47:30 executing program 0: 17:47:30 executing program 4: 17:47:30 executing program 5: 17:47:30 executing program 3: 17:47:30 executing program 2: 17:47:30 executing program 1: 17:47:30 executing program 0: 17:47:30 executing program 4: 17:47:30 executing program 5: 17:47:30 executing program 3: 17:47:31 executing program 2: 17:47:31 executing program 0: 17:47:31 executing program 1: 17:47:31 executing program 4: 17:47:31 executing program 3: 17:47:31 executing program 2: 17:47:31 executing program 5: 17:47:31 executing program 4: 17:47:31 executing program 0: 17:47:31 executing program 3: 17:47:31 executing program 1: 17:47:31 executing program 2: 17:47:31 executing program 4: 17:47:31 executing program 0: 17:47:31 executing program 5: 17:47:31 executing program 3: 17:47:31 executing program 2: 17:47:31 executing program 1: 17:47:31 executing program 4: 17:47:31 executing program 0: 17:47:31 executing program 5: 17:47:31 executing program 3: 17:47:32 executing program 2: 17:47:32 executing program 1: 17:47:32 executing program 5: 17:47:32 executing program 0: 17:47:32 executing program 4: 17:47:32 executing program 2: 17:47:32 executing program 1: 17:47:32 executing program 3: 17:47:32 executing program 4: 17:47:32 executing program 5: 17:47:32 executing program 0: 17:47:32 executing program 2: 17:47:32 executing program 1: 17:47:32 executing program 3: 17:47:32 executing program 5: 17:47:32 executing program 4: 17:47:32 executing program 2: 17:47:32 executing program 0: 17:47:32 executing program 3: 17:47:32 executing program 4: 17:47:32 executing program 1: 17:47:32 executing program 5: 17:47:33 executing program 3: 17:47:33 executing program 4: 17:47:33 executing program 2: 17:47:33 executing program 0: 17:47:33 executing program 1: 17:47:33 executing program 5: 17:47:33 executing program 4: 17:47:33 executing program 3: 17:47:33 executing program 0: 17:47:33 executing program 5: 17:47:33 executing program 2: 17:47:33 executing program 4: 17:47:33 executing program 3: 17:47:33 executing program 1: 17:47:33 executing program 0: 17:47:33 executing program 4: 17:47:33 executing program 5: 17:47:33 executing program 2: 17:47:33 executing program 1: 17:47:33 executing program 3: 17:47:33 executing program 0: 17:47:33 executing program 4: 17:47:33 executing program 2: 17:47:33 executing program 5: 17:47:34 executing program 3: 17:47:34 executing program 1: 17:47:34 executing program 2: 17:47:34 executing program 4: 17:47:34 executing program 5: 17:47:34 executing program 3: 17:47:34 executing program 1: 17:47:34 executing program 0: 17:47:34 executing program 3: 17:47:34 executing program 1: 17:47:34 executing program 2: 17:47:34 executing program 5: 17:47:34 executing program 4: 17:47:34 executing program 3: 17:47:34 executing program 0: 17:47:34 executing program 1: 17:47:34 executing program 5: 17:47:34 executing program 2: 17:47:34 executing program 4: 17:47:34 executing program 3: 17:47:34 executing program 0: 17:47:34 executing program 1: 17:47:35 executing program 2: 17:47:35 executing program 5: 17:47:35 executing program 4: 17:47:35 executing program 3: 17:47:35 executing program 0: 17:47:35 executing program 5: 17:47:35 executing program 1: 17:47:35 executing program 2: 17:47:35 executing program 4: 17:47:35 executing program 3: 17:47:35 executing program 5: 17:47:35 executing program 0: 17:47:35 executing program 1: 17:47:35 executing program 2: 17:47:35 executing program 4: 17:47:35 executing program 3: 17:47:35 executing program 5: 17:47:35 executing program 0: 17:47:35 executing program 1: 17:47:35 executing program 2: 17:47:36 executing program 4: 17:47:36 executing program 0: 17:47:36 executing program 3: 17:47:36 executing program 5: 17:47:36 executing program 1: 17:47:36 executing program 2: 17:47:36 executing program 4: 17:47:36 executing program 1: 17:47:36 executing program 2: 17:47:36 executing program 5: 17:47:36 executing program 3: 17:47:36 executing program 0: 17:47:36 executing program 4: 17:47:36 executing program 5: 17:47:36 executing program 1: 17:47:36 executing program 2: 17:47:36 executing program 0: 17:47:36 executing program 3: 17:47:36 executing program 4: 17:47:36 executing program 2: 17:47:36 executing program 1: 17:47:36 executing program 5: 17:47:37 executing program 4: 17:47:37 executing program 0: 17:47:37 executing program 3: 17:47:37 executing program 1: 17:47:37 executing program 2: 17:47:37 executing program 5: 17:47:37 executing program 4: 17:47:37 executing program 2: 17:47:37 executing program 0: 17:47:37 executing program 1: 17:47:37 executing program 3: 17:47:37 executing program 5: 17:47:37 executing program 4: 17:47:37 executing program 2: 17:47:37 executing program 0: 17:47:37 executing program 3: 17:47:37 executing program 1: 17:47:37 executing program 5: 17:47:37 executing program 2: 17:47:37 executing program 0: 17:47:37 executing program 4: 17:47:37 executing program 3: 17:47:38 executing program 1: 17:47:38 executing program 5: 17:47:38 executing program 2: 17:47:38 executing program 0: 17:47:38 executing program 4: 17:47:38 executing program 1: 17:47:38 executing program 3: 17:47:38 executing program 5: 17:47:38 executing program 2: 17:47:38 executing program 0: 17:47:38 executing program 4: 17:47:38 executing program 3: 17:47:38 executing program 1: 17:47:38 executing program 5: 17:47:38 executing program 0: 17:47:38 executing program 2: 17:47:38 executing program 4: 17:47:38 executing program 1: 17:47:38 executing program 4: 17:47:38 executing program 3: 17:47:38 executing program 5: 17:47:38 executing program 2: 17:47:39 executing program 0: 17:47:39 executing program 4: 17:47:39 executing program 3: 17:47:39 executing program 1: 17:47:39 executing program 2: 17:47:39 executing program 0: 17:47:39 executing program 4: 17:47:39 executing program 5: 17:47:39 executing program 3: 17:47:39 executing program 2: 17:47:39 executing program 1: 17:47:39 executing program 0: 17:47:39 executing program 5: 17:47:39 executing program 3: 17:47:39 executing program 4: 17:47:39 executing program 2: 17:47:39 executing program 1: 17:47:39 executing program 0: 17:47:39 executing program 3: 17:47:39 executing program 5: 17:47:40 executing program 4: 17:47:40 executing program 2: 17:47:40 executing program 1: 17:47:40 executing program 0: 17:47:40 executing program 3: 17:47:40 executing program 4: 17:47:40 executing program 5: 17:47:40 executing program 1: 17:47:40 executing program 2: 17:47:40 executing program 0: 17:47:40 executing program 4: 17:47:40 executing program 3: 17:47:40 executing program 5: 17:47:40 executing program 2: 17:47:40 executing program 1: 17:47:40 executing program 0: 17:47:40 executing program 3: 17:47:40 executing program 5: 17:47:40 executing program 4: 17:47:40 executing program 2: 17:47:40 executing program 1: 17:47:41 executing program 0: 17:47:41 executing program 5: 17:47:41 executing program 3: 17:47:41 executing program 1: 17:47:41 executing program 2: 17:47:41 executing program 4: 17:47:41 executing program 0: 17:47:41 executing program 3: 17:47:41 executing program 1: 17:47:41 executing program 5: 17:47:41 executing program 4: 17:47:41 executing program 0: 17:47:41 executing program 2: 17:47:41 executing program 3: 17:47:41 executing program 5: 17:47:41 executing program 1: 17:47:41 executing program 4: 17:47:41 executing program 0: 17:47:41 executing program 2: 17:47:41 executing program 5: 17:47:42 executing program 3: 17:47:42 executing program 4: 17:47:42 executing program 1: 17:47:42 executing program 2: 17:47:42 executing program 0: 17:47:42 executing program 3: 17:47:42 executing program 5: 17:47:42 executing program 1: 17:47:42 executing program 4: 17:47:42 executing program 2: 17:47:42 executing program 3: 17:47:42 executing program 0: 17:47:42 executing program 1: 17:47:42 executing program 4: 17:47:42 executing program 5: 17:47:42 executing program 0: 17:47:42 executing program 2: 17:47:42 executing program 5: 17:47:42 executing program 3: 17:47:42 executing program 0: 17:47:42 executing program 4: 17:47:42 executing program 1: 17:47:43 executing program 2: 17:47:43 executing program 5: 17:47:43 executing program 3: 17:47:43 executing program 4: 17:47:43 executing program 0: 17:47:43 executing program 1: 17:47:43 executing program 2: 17:47:43 executing program 5: 17:47:43 executing program 3: 17:47:43 executing program 4: 17:47:43 executing program 0: 17:47:43 executing program 1: 17:47:43 executing program 2: 17:47:43 executing program 5: 17:47:43 executing program 0: 17:47:43 executing program 4: 17:47:43 executing program 1: 17:47:43 executing program 3: 17:47:43 executing program 2: 17:47:44 executing program 5: 17:47:44 executing program 0: 17:47:44 executing program 1: 17:47:44 executing program 2: 17:47:44 executing program 4: 17:47:44 executing program 3: 17:47:44 executing program 5: 17:47:44 executing program 0: 17:47:44 executing program 1: 17:47:44 executing program 2: 17:47:44 executing program 4: 17:47:44 executing program 5: 17:47:44 executing program 3: 17:47:44 executing program 0: 17:47:44 executing program 4: 17:47:44 executing program 1: 17:47:44 executing program 2: 17:47:44 executing program 5: 17:47:44 executing program 3: 17:47:44 executing program 4: 17:47:44 executing program 1: 17:47:44 executing program 2: 17:47:44 executing program 0: 17:47:45 executing program 5: 17:47:45 executing program 3: 17:47:45 executing program 1: 17:47:45 executing program 2: 17:47:45 executing program 4: 17:47:45 executing program 0: 17:47:45 executing program 5: 17:47:45 executing program 1: 17:47:45 executing program 4: 17:47:45 executing program 2: 17:47:45 executing program 3: 17:47:45 executing program 5: 17:47:45 executing program 0: 17:47:45 executing program 3: 17:47:45 executing program 4: 17:47:45 executing program 2: 17:47:45 executing program 5: 17:47:45 executing program 1: 17:47:46 executing program 3: 17:47:46 executing program 0: 17:47:46 executing program 2: 17:47:46 executing program 5: 17:47:46 executing program 4: 17:47:46 executing program 1: 17:47:46 executing program 3: 17:47:46 executing program 0: 17:47:46 executing program 4: 17:47:46 executing program 2: 17:47:46 executing program 5: 17:47:46 executing program 1: 17:47:46 executing program 0: 17:47:46 executing program 3: 17:47:46 executing program 5: 17:47:46 executing program 4: 17:47:46 executing program 2: 17:47:46 executing program 1: 17:47:46 executing program 3: 17:47:46 executing program 0: 17:47:46 executing program 5: 17:47:46 executing program 2: 17:47:47 executing program 4: 17:47:47 executing program 1: 17:47:47 executing program 0: 17:47:47 executing program 5: 17:47:47 executing program 3: 17:47:47 executing program 2: 17:47:47 executing program 1: 17:47:47 executing program 4: 17:47:47 executing program 5: 17:47:47 executing program 0: 17:47:47 executing program 2: 17:47:47 executing program 4: 17:47:47 executing program 3: 17:47:47 executing program 1: 17:47:47 executing program 5: 17:47:47 executing program 0: 17:47:47 executing program 4: 17:47:47 executing program 1: 17:47:47 executing program 2: 17:47:47 executing program 3: 17:47:48 executing program 0: 17:47:48 executing program 5: 17:47:48 executing program 4: 17:47:48 executing program 2: 17:47:48 executing program 1: 17:47:48 executing program 3: 17:47:48 executing program 0: 17:47:48 executing program 5: 17:47:48 executing program 4: 17:47:48 executing program 2: 17:47:48 executing program 1: 17:47:48 executing program 3: 17:47:48 executing program 0: 17:47:48 executing program 5: 17:47:48 executing program 4: 17:47:48 executing program 2: 17:47:48 executing program 1: 17:47:48 executing program 0: 17:47:48 executing program 5: 17:47:48 executing program 3: 17:47:49 executing program 4: 17:47:49 executing program 1: 17:47:49 executing program 2: 17:47:49 executing program 5: 17:47:49 executing program 0: 17:47:49 executing program 3: 17:47:49 executing program 4: 17:47:49 executing program 1: 17:47:49 executing program 5: 17:47:49 executing program 2: 17:47:49 executing program 0: 17:47:49 executing program 3: 17:47:49 executing program 1: 17:47:49 executing program 4: 17:47:49 executing program 5: 17:47:49 executing program 3: 17:47:49 executing program 4: 17:47:49 executing program 2: 17:47:49 executing program 1: 17:47:49 executing program 0: 17:47:50 executing program 5: 17:47:50 executing program 3: 17:47:50 executing program 4: 17:47:50 executing program 2: 17:47:50 executing program 1: 17:47:50 executing program 0: 17:47:50 executing program 5: 17:47:50 executing program 2: 17:47:50 executing program 3: 17:47:50 executing program 4: 17:47:50 executing program 1: 17:47:50 executing program 0: 17:47:50 executing program 5: 17:47:50 executing program 2: 17:47:50 executing program 3: 17:47:50 executing program 4: 17:47:50 executing program 1: 17:47:50 executing program 0: 17:47:50 executing program 2: 17:47:50 executing program 3: 17:47:51 executing program 1: 17:47:51 executing program 5: 17:47:51 executing program 4: 17:47:51 executing program 0: 17:47:51 executing program 2: 17:47:51 executing program 1: 17:47:51 executing program 3: 17:47:51 executing program 5: 17:47:51 executing program 4: 17:47:51 executing program 0: 17:47:51 executing program 2: 17:47:51 executing program 5: 17:47:51 executing program 1: 17:47:51 executing program 3: 17:47:51 executing program 4: 17:47:51 executing program 0: 17:47:51 executing program 2: 17:47:51 executing program 4: 17:47:51 executing program 3: 17:47:51 executing program 5: 17:47:51 executing program 0: 17:47:51 executing program 1: 17:47:51 executing program 2: 17:47:52 executing program 4: 17:47:52 executing program 2: 17:47:52 executing program 3: 17:47:52 executing program 0: 17:47:52 executing program 5: 17:47:52 executing program 1: 17:47:52 executing program 4: 17:47:52 executing program 3: 17:47:52 executing program 2: 17:47:52 executing program 0: 17:47:52 executing program 5: 17:47:52 executing program 1: 17:47:52 executing program 4: 17:47:52 executing program 3: 17:47:52 executing program 1: 17:47:52 executing program 0: 17:47:52 executing program 2: 17:47:52 executing program 5: 17:47:53 executing program 3: 17:47:53 executing program 4: 17:47:53 executing program 1: 17:47:53 executing program 0: 17:47:53 executing program 5: 17:47:53 executing program 2: 17:47:53 executing program 4: 17:47:53 executing program 0: 17:47:53 executing program 1: 17:47:53 executing program 2: 17:47:53 executing program 3: 17:47:53 executing program 5: 17:47:53 executing program 4: 17:47:53 executing program 2: 17:47:53 executing program 0: 17:47:53 executing program 1: 17:47:53 executing program 3: 17:47:53 executing program 5: 17:47:53 executing program 4: 17:47:54 executing program 0: 17:47:54 executing program 2: 17:47:54 executing program 1: 17:47:54 executing program 3: 17:47:54 executing program 5: 17:47:54 executing program 0: 17:47:54 executing program 4: 17:47:54 executing program 2: 17:47:54 executing program 1: 17:47:54 executing program 4: 17:47:54 executing program 0: 17:47:54 executing program 2: 17:47:54 executing program 3: 17:47:54 executing program 5: 17:47:54 executing program 1: 17:47:54 executing program 4: 17:47:54 executing program 5: 17:47:54 executing program 0: 17:47:54 executing program 3: 17:47:54 executing program 2: 17:47:54 executing program 5: 17:47:54 executing program 4: 17:47:54 executing program 1: 17:47:54 executing program 0: 17:47:54 executing program 3: 17:47:54 executing program 2: 17:47:55 executing program 1: 17:47:55 executing program 4: 17:47:55 executing program 5: 17:47:55 executing program 2: 17:47:55 executing program 3: 17:47:55 executing program 0: 17:47:55 executing program 5: 17:47:55 executing program 4: 17:47:55 executing program 1: 17:47:55 executing program 2: 17:47:55 executing program 3: 17:47:55 executing program 4: 17:47:55 executing program 0: 17:47:55 executing program 1: 17:47:55 executing program 5: 17:47:55 executing program 3: 17:47:55 executing program 2: 17:47:55 executing program 0: 17:47:55 executing program 4: 17:47:55 executing program 3: 17:47:55 executing program 1: 17:47:55 executing program 2: 17:47:56 executing program 5: 17:47:56 executing program 4: 17:47:56 executing program 0: 17:47:56 executing program 3: 17:47:56 executing program 2: 17:47:56 executing program 1: 17:47:56 executing program 5: 17:47:56 executing program 4: 17:47:56 executing program 3: 17:47:56 executing program 1: 17:47:56 executing program 2: 17:47:56 executing program 0: 17:47:56 executing program 5: 17:47:56 executing program 3: 17:47:56 executing program 4: 17:47:56 executing program 2: 17:47:56 executing program 1: 17:47:56 executing program 0: 17:47:56 executing program 5: 17:47:56 executing program 4: 17:47:57 executing program 2: 17:47:57 executing program 3: 17:47:57 executing program 1: 17:47:57 executing program 5: 17:47:57 executing program 0: 17:47:57 executing program 4: 17:47:57 executing program 2: 17:47:57 executing program 1: 17:47:57 executing program 3: 17:47:57 executing program 0: 17:47:57 executing program 5: 17:47:57 executing program 4: 17:47:57 executing program 2: 17:47:57 executing program 1: 17:47:57 executing program 3: 17:47:57 executing program 0: 17:47:57 executing program 5: 17:47:57 executing program 4: 17:47:57 executing program 2: 17:47:57 executing program 1: 17:47:57 executing program 5: 17:47:57 executing program 3: 17:47:58 executing program 2: 17:47:58 executing program 0: 17:47:58 executing program 1: 17:47:58 executing program 4: 17:47:58 executing program 5: 17:47:58 executing program 3: 17:47:58 executing program 1: 17:47:58 executing program 0: 17:47:58 executing program 2: 17:47:58 executing program 4: 17:47:58 executing program 5: 17:47:58 executing program 3: 17:47:58 executing program 2: 17:47:58 executing program 1: 17:47:58 executing program 4: 17:47:58 executing program 0: 17:47:58 executing program 2: 17:47:58 executing program 5: 17:47:58 executing program 3: 17:47:58 executing program 1: 17:47:58 executing program 4: 17:47:58 executing program 0: 17:47:59 executing program 2: 17:47:59 executing program 3: 17:47:59 executing program 5: 17:47:59 executing program 1: 17:47:59 executing program 4: 17:47:59 executing program 0: 17:47:59 executing program 2: 17:47:59 executing program 3: 17:47:59 executing program 1: 17:47:59 executing program 4: 17:47:59 executing program 0: 17:47:59 executing program 5: 17:47:59 executing program 2: 17:47:59 executing program 3: 17:47:59 executing program 1: 17:47:59 executing program 4: 17:47:59 executing program 0: 17:47:59 executing program 3: 17:47:59 executing program 5: 17:47:59 executing program 2: 17:47:59 executing program 1: 17:47:59 executing program 4: 17:48:00 executing program 0: 17:48:00 executing program 5: 17:48:00 executing program 2: 17:48:00 executing program 0: 17:48:00 executing program 3: 17:48:00 executing program 1: 17:48:00 executing program 5: 17:48:00 executing program 4: 17:48:00 executing program 3: 17:48:00 executing program 2: 17:48:00 executing program 0: 17:48:00 executing program 1: 17:48:00 executing program 5: 17:48:00 executing program 4: 17:48:00 executing program 3: 17:48:00 executing program 0: 17:48:00 executing program 1: 17:48:00 executing program 2: 17:48:00 executing program 4: 17:48:00 executing program 5: 17:48:01 executing program 3: 17:48:01 executing program 0: 17:48:01 executing program 1: 17:48:01 executing program 2: 17:48:01 executing program 4: 17:48:01 executing program 5: 17:48:01 executing program 3: 17:48:01 executing program 0: 17:48:01 executing program 1: 17:48:01 executing program 2: 17:48:01 executing program 4: 17:48:01 executing program 3: 17:48:01 executing program 0: 17:48:01 executing program 2: 17:48:01 executing program 5: 17:48:01 executing program 1: 17:48:01 executing program 4: 17:48:01 executing program 2: 17:48:01 executing program 5: 17:48:01 executing program 0: 17:48:01 executing program 3: 17:48:01 executing program 1: 17:48:02 executing program 2: 17:48:02 executing program 5: 17:48:02 executing program 4: 17:48:02 executing program 0: 17:48:02 executing program 3: 17:48:02 executing program 1: 17:48:02 executing program 2: 17:48:02 executing program 4: 17:48:02 executing program 5: 17:48:02 executing program 0: 17:48:02 executing program 1: 17:48:02 executing program 2: 17:48:02 executing program 3: 17:48:02 executing program 4: 17:48:02 executing program 5: 17:48:02 executing program 0: 17:48:02 executing program 2: 17:48:02 executing program 1: 17:48:02 executing program 3: 17:48:02 executing program 4: 17:48:02 executing program 5: 17:48:03 executing program 0: 17:48:03 executing program 3: 17:48:03 executing program 4: 17:48:03 executing program 2: 17:48:03 executing program 1: 17:48:03 executing program 0: 17:48:03 executing program 3: 17:48:03 executing program 5: 17:48:03 executing program 2: 17:48:03 executing program 4: 17:48:03 executing program 1: 17:48:03 executing program 3: 17:48:03 executing program 0: 17:48:03 executing program 5: 17:48:03 executing program 2: 17:48:03 executing program 4: 17:48:03 executing program 3: 17:48:03 executing program 1: 17:48:03 executing program 0: 17:48:03 executing program 2: 17:48:03 executing program 5: 17:48:03 executing program 4: 17:48:04 executing program 3: 17:48:04 executing program 0: 17:48:04 executing program 1: 17:48:04 executing program 2: 17:48:04 executing program 4: 17:48:04 executing program 5: 17:48:04 executing program 3: 17:48:04 executing program 2: 17:48:04 executing program 4: 17:48:04 executing program 0: 17:48:04 executing program 1: 17:48:04 executing program 5: 17:48:04 executing program 3: 17:48:04 executing program 2: 17:48:04 executing program 4: 17:48:04 executing program 1: 17:48:04 executing program 0: 17:48:04 executing program 3: 17:48:04 executing program 5: 17:48:05 executing program 2: 17:48:05 executing program 4: 17:48:05 executing program 0: 17:48:05 executing program 3: 17:48:05 executing program 1: 17:48:05 executing program 5: 17:48:05 executing program 2: 17:48:05 executing program 0: 17:48:05 executing program 4: 17:48:05 executing program 1: 17:48:05 executing program 3: 17:48:05 executing program 5: 17:48:05 executing program 2: 17:48:05 executing program 0: 17:48:05 executing program 1: 17:48:05 executing program 4: 17:48:05 executing program 5: 17:48:05 executing program 3: 17:48:05 executing program 0: 17:48:05 executing program 2: 17:48:05 executing program 4: 17:48:05 executing program 1: 17:48:05 executing program 5: 17:48:06 executing program 3: 17:48:06 executing program 0: 17:48:06 executing program 4: 17:48:06 executing program 5: 17:48:06 executing program 1: 17:48:06 executing program 2: 17:48:06 executing program 3: 17:48:06 executing program 4: 17:48:06 executing program 0: 17:48:06 executing program 5: 17:48:06 executing program 2: 17:48:06 executing program 1: 17:48:06 executing program 4: 17:48:06 executing program 0: 17:48:06 executing program 3: 17:48:06 executing program 5: 17:48:06 executing program 2: 17:48:06 executing program 1: 17:48:06 executing program 0: 17:48:06 executing program 4: 17:48:07 executing program 3: 17:48:07 executing program 5: 17:48:07 executing program 2: 17:48:07 executing program 4: 17:48:07 executing program 1: 17:48:07 executing program 0: 17:48:07 executing program 3: 17:48:07 executing program 5: 17:48:07 executing program 2: 17:48:07 executing program 4: 17:48:07 executing program 1: 17:48:07 executing program 3: 17:48:07 executing program 0: 17:48:07 executing program 5: 17:48:07 executing program 4: 17:48:07 executing program 2: 17:48:07 executing program 1: 17:48:07 executing program 3: 17:48:07 executing program 0: 17:48:08 executing program 4: 17:48:08 executing program 1: 17:48:08 executing program 2: 17:48:08 executing program 3: 17:48:08 executing program 5: 17:48:08 executing program 0: 17:48:08 executing program 4: 17:48:08 executing program 1: 17:48:08 executing program 2: 17:48:08 executing program 3: 17:48:08 executing program 0: 17:48:08 executing program 5: 17:48:08 executing program 4: 17:48:08 executing program 2: 17:48:08 executing program 1: 17:48:08 executing program 3: 17:48:08 executing program 5: 17:48:08 executing program 2: 17:48:08 executing program 0: 17:48:08 executing program 4: 17:48:09 executing program 3: 17:48:09 executing program 5: 17:48:09 executing program 2: 17:48:09 executing program 0: 17:48:09 executing program 1: 17:48:09 executing program 4: 17:48:09 executing program 3: 17:48:09 executing program 0: 17:48:09 executing program 2: 17:48:09 executing program 4: 17:48:09 executing program 5: 17:48:09 executing program 1: 17:48:09 executing program 3: 17:48:09 executing program 0: 17:48:09 executing program 4: 17:48:09 executing program 5: 17:48:09 executing program 2: 17:48:09 executing program 1: 17:48:09 executing program 3: 17:48:09 executing program 0: 17:48:09 executing program 5: 17:48:10 executing program 4: 17:48:10 executing program 2: 17:48:10 executing program 3: 17:48:10 executing program 1: 17:48:10 executing program 0: 17:48:10 executing program 5: 17:48:10 executing program 4: 17:48:10 executing program 2: 17:48:10 executing program 3: 17:48:10 executing program 1: 17:48:10 executing program 0: 17:48:10 executing program 5: 17:48:10 executing program 4: 17:48:10 executing program 3: 17:48:10 executing program 2: 17:48:10 executing program 1: 17:48:10 executing program 5: 17:48:10 executing program 4: 17:48:10 executing program 0: 17:48:10 executing program 3: 17:48:10 executing program 1: 17:48:11 executing program 2: 17:48:11 executing program 4: 17:48:11 executing program 5: 17:48:11 executing program 0: 17:48:11 executing program 3: 17:48:11 executing program 1: 17:48:11 executing program 4: 17:48:11 executing program 5: 17:48:11 executing program 2: 17:48:11 executing program 3: 17:48:11 executing program 1: 17:48:11 executing program 0: 17:48:11 executing program 4: 17:48:11 executing program 2: 17:48:11 executing program 5: 17:48:11 executing program 1: 17:48:11 executing program 3: 17:48:11 executing program 0: 17:48:11 executing program 2: 17:48:11 executing program 5: 17:48:12 executing program 4: 17:48:12 executing program 1: 17:48:12 executing program 0: 17:48:12 executing program 2: 17:48:12 executing program 3: 17:48:12 executing program 5: 17:48:12 executing program 3: 17:48:12 executing program 2: 17:48:12 executing program 0: 17:48:12 executing program 1: 17:48:12 executing program 4: 17:48:12 executing program 3: 17:48:12 executing program 2: 17:48:12 executing program 0: 17:48:12 executing program 4: 17:48:12 executing program 5: 17:48:12 executing program 1: 17:48:12 executing program 3: 17:48:12 executing program 0: 17:48:12 executing program 2: 17:48:12 executing program 4: 17:48:13 executing program 5: 17:48:13 executing program 3: 17:48:13 executing program 0: 17:48:13 executing program 1: 17:48:13 executing program 2: 17:48:13 executing program 4: 17:48:13 executing program 5: 17:48:13 executing program 3: 17:48:13 executing program 0: 17:48:13 executing program 4: 17:48:13 executing program 1: 17:48:13 executing program 2: 17:48:13 executing program 0: 17:48:13 executing program 5: 17:48:13 executing program 1: 17:48:13 executing program 3: 17:48:13 executing program 4: 17:48:13 executing program 2: 17:48:13 executing program 5: 17:48:14 executing program 1: 17:48:14 executing program 3: 17:48:14 executing program 4: 17:48:14 executing program 5: 17:48:14 executing program 2: 17:48:14 executing program 0: 17:48:14 executing program 3: 17:48:14 executing program 4: 17:48:14 executing program 1: 17:48:14 executing program 2: 17:48:14 executing program 5: 17:48:14 executing program 3: 17:48:14 executing program 0: 17:48:14 executing program 4: 17:48:14 executing program 1: 17:48:14 executing program 2: 17:48:14 executing program 5: 17:48:14 executing program 3: 17:48:14 executing program 4: 17:48:14 executing program 1: 17:48:14 executing program 2: 17:48:14 executing program 0: 17:48:15 executing program 3: 17:48:15 executing program 5: 17:48:15 executing program 2: 17:48:15 executing program 4: 17:48:15 executing program 0: 17:48:15 executing program 1: 17:48:15 executing program 3: 17:48:15 executing program 4: 17:48:15 executing program 2: 17:48:15 executing program 5: 17:48:15 executing program 0: 17:48:15 executing program 3: 17:48:15 executing program 1: 17:48:15 executing program 2: 17:48:15 executing program 4: 17:48:15 executing program 0: 17:48:15 executing program 3: 17:48:15 executing program 1: 17:48:15 executing program 2: 17:48:15 executing program 5: 17:48:16 executing program 4: 17:48:16 executing program 0: 17:48:16 executing program 1: 17:48:16 executing program 2: 17:48:16 executing program 3: 17:48:16 executing program 5: 17:48:16 executing program 4: 17:48:16 executing program 0: 17:48:16 executing program 3: 17:48:16 executing program 2: 17:48:16 executing program 1: 17:48:16 executing program 5: 17:48:16 executing program 4: 17:48:16 executing program 0: 17:48:16 executing program 3: 17:48:16 executing program 2: 17:48:16 executing program 1: 17:48:16 executing program 5: 17:48:16 executing program 4: 17:48:16 executing program 3: 17:48:17 executing program 0: 17:48:17 executing program 2: 17:48:17 executing program 5: 17:48:17 executing program 1: 17:48:17 executing program 4: 17:48:17 executing program 3: 17:48:17 executing program 0: 17:48:17 executing program 4: 17:48:17 executing program 1: 17:48:17 executing program 5: 17:48:17 executing program 2: 17:48:17 executing program 3: 17:48:17 executing program 0: 17:48:17 executing program 4: 17:48:17 executing program 2: 17:48:17 executing program 1: 17:48:17 executing program 5: 17:48:17 executing program 3: 17:48:17 executing program 0: 17:48:17 executing program 4: 17:48:17 executing program 2: 17:48:18 executing program 1: 17:48:18 executing program 5: 17:48:18 executing program 3: 17:48:18 executing program 2: 17:48:18 executing program 0: 17:48:18 executing program 1: 17:48:18 executing program 4: 17:48:18 executing program 5: 17:48:18 executing program 3: 17:48:18 executing program 2: 17:48:18 executing program 4: 17:48:18 executing program 0: 17:48:18 executing program 1: 17:48:18 executing program 5: 17:48:18 executing program 3: 17:48:18 executing program 2: 17:48:18 executing program 4: 17:48:18 executing program 0: 17:48:18 executing program 1: 17:48:18 executing program 5: 17:48:18 executing program 3: 17:48:19 executing program 2: 17:48:19 executing program 4: 17:48:19 executing program 0: 17:48:19 executing program 5: 17:48:19 executing program 1: 17:48:19 executing program 2: 17:48:19 executing program 3: 17:48:19 executing program 0: 17:48:19 executing program 4: 17:48:19 executing program 2: 17:48:19 executing program 5: 17:48:19 executing program 3: 17:48:19 executing program 1: 17:48:19 executing program 0: 17:48:19 executing program 4: 17:48:19 executing program 5: 17:48:19 executing program 2: 17:48:19 executing program 3: 17:48:19 executing program 1: 17:48:20 executing program 0: 17:48:20 executing program 5: 17:48:20 executing program 4: 17:48:20 executing program 3: 17:48:20 executing program 1: 17:48:20 executing program 2: 17:48:20 executing program 4: 17:48:20 executing program 3: 17:48:20 executing program 0: 17:48:20 executing program 5: 17:48:20 executing program 1: 17:48:20 executing program 2: 17:48:20 executing program 0: 17:48:20 executing program 4: 17:48:20 executing program 1: 17:48:20 executing program 3: 17:48:20 executing program 5: 17:48:20 executing program 2: 17:48:21 executing program 0: 17:48:21 executing program 5: 17:48:21 executing program 3: 17:48:21 executing program 1: 17:48:21 executing program 4: 17:48:21 executing program 2: 17:48:21 executing program 3: 17:48:21 executing program 5: 17:48:21 executing program 1: 17:48:21 executing program 0: 17:48:21 executing program 4: 17:48:21 executing program 2: 17:48:21 executing program 3: 17:48:21 executing program 1: 17:48:21 executing program 5: 17:48:21 executing program 0: 17:48:21 executing program 4: 17:48:21 executing program 3: 17:48:21 executing program 2: 17:48:21 executing program 1: 17:48:22 executing program 5: 17:48:22 executing program 0: 17:48:22 executing program 4: 17:48:22 executing program 3: 17:48:22 executing program 1: 17:48:22 executing program 2: 17:48:22 executing program 0: 17:48:22 executing program 5: 17:48:22 executing program 3: 17:48:22 executing program 1: 17:48:22 executing program 2: 17:48:22 executing program 5: 17:48:22 executing program 0: 17:48:22 executing program 4: 17:48:22 executing program 3: 17:48:22 executing program 1: 17:48:22 executing program 0: 17:48:22 executing program 4: 17:48:22 executing program 5: 17:48:22 executing program 2: 17:48:23 executing program 3: 17:48:23 executing program 1: 17:48:23 executing program 5: 17:48:23 executing program 4: 17:48:23 executing program 0: 17:48:23 executing program 2: 17:48:23 executing program 3: 17:48:23 executing program 5: 17:48:23 executing program 4: 17:48:23 executing program 1: 17:48:23 executing program 2: 17:48:23 executing program 0: 17:48:23 executing program 2: 17:48:23 executing program 3: 17:48:23 executing program 0: 17:48:23 executing program 5: 17:48:23 executing program 4: 17:48:23 executing program 1: 17:48:23 executing program 2: 17:48:23 executing program 0: 17:48:23 executing program 3: 17:48:24 executing program 5: 17:48:24 executing program 4: 17:48:24 executing program 1: 17:48:24 executing program 2: 17:48:24 executing program 0: 17:48:24 executing program 3: 17:48:24 executing program 5: 17:48:24 executing program 4: 17:48:24 executing program 1: 17:48:24 executing program 2: 17:48:24 executing program 3: 17:48:24 executing program 0: 17:48:24 executing program 5: 17:48:24 executing program 4: 17:48:24 executing program 1: 17:48:24 executing program 3: 17:48:24 executing program 2: 17:48:24 executing program 5: 17:48:24 executing program 0: 17:48:24 executing program 4: 17:48:24 executing program 5: 17:48:24 executing program 2: 17:48:24 executing program 1: 17:48:25 executing program 3: 17:48:25 executing program 0: 17:48:25 executing program 4: 17:48:25 executing program 3: 17:48:25 executing program 5: 17:48:25 executing program 1: 17:48:25 executing program 4: 17:48:25 executing program 0: 17:48:25 executing program 2: 17:48:25 executing program 3: 17:48:25 executing program 1: 17:48:25 executing program 2: 17:48:25 executing program 0: 17:48:25 executing program 3: 17:48:25 executing program 5: 17:48:25 executing program 4: 17:48:25 executing program 1: 17:48:25 executing program 0: 17:48:25 executing program 3: 17:48:25 executing program 5: 17:48:25 executing program 2: 17:48:25 executing program 4: 17:48:26 executing program 3: 17:48:26 executing program 0: 17:48:26 executing program 5: 17:48:26 executing program 1: 17:48:26 executing program 4: 17:48:26 executing program 2: 17:48:26 executing program 1: 17:48:26 executing program 3: 17:48:26 executing program 0: 17:48:26 executing program 5: 17:48:26 executing program 4: 17:48:26 executing program 2: 17:48:26 executing program 1: 17:48:26 executing program 0: 17:48:26 executing program 3: 17:48:26 executing program 4: 17:48:26 executing program 5: 17:48:26 executing program 1: 17:48:26 executing program 2: 17:48:26 executing program 0: 17:48:26 executing program 4: 17:48:26 executing program 3: 17:48:26 executing program 5: 17:48:27 executing program 1: 17:48:27 executing program 2: 17:48:27 executing program 0: 17:48:27 executing program 4: 17:48:27 executing program 3: 17:48:27 executing program 5: 17:48:27 executing program 1: 17:48:27 executing program 0: 17:48:27 executing program 2: 17:48:27 executing program 4: 17:48:27 executing program 3: 17:48:27 executing program 5: 17:48:27 executing program 0: 17:48:27 executing program 2: 17:48:27 executing program 1: 17:48:27 executing program 5: 17:48:27 executing program 4: 17:48:27 executing program 3: 17:48:27 executing program 2: 17:48:27 executing program 0: 17:48:27 executing program 1: 17:48:28 executing program 5: 17:48:28 executing program 3: 17:48:28 executing program 4: 17:48:28 executing program 2: 17:48:28 executing program 0: 17:48:28 executing program 1: 17:48:28 executing program 3: 17:48:28 executing program 5: 17:48:28 executing program 4: 17:48:28 executing program 2: 17:48:28 executing program 0: 17:48:28 executing program 1: 17:48:28 executing program 5: 17:48:28 executing program 3: 17:48:28 executing program 2: 17:48:28 executing program 4: 17:48:28 executing program 0: 17:48:28 executing program 5: 17:48:28 executing program 1: 17:48:28 executing program 3: 17:48:28 executing program 2: 17:48:29 executing program 4: 17:48:29 executing program 0: 17:48:29 executing program 5: 17:48:29 executing program 3: 17:48:29 executing program 2: 17:48:29 executing program 1: 17:48:29 executing program 4: 17:48:29 executing program 0: 17:48:29 executing program 5: 17:48:29 executing program 1: 17:48:29 executing program 3: 17:48:29 executing program 2: 17:48:29 executing program 4: 17:48:29 executing program 0: 17:48:29 executing program 5: 17:48:29 executing program 3: 17:48:29 executing program 1: 17:48:29 executing program 2: 17:48:29 executing program 4: 17:48:29 executing program 5: 17:48:29 executing program 0: 17:48:29 executing program 3: 17:48:29 executing program 1: 17:48:30 executing program 2: 17:48:30 executing program 5: 17:48:30 executing program 4: 17:48:30 executing program 0: 17:48:30 executing program 1: 17:48:30 executing program 3: 17:48:30 executing program 2: 17:48:30 executing program 5: 17:48:30 executing program 4: 17:48:30 executing program 0: 17:48:30 executing program 3: 17:48:30 executing program 1: 17:48:30 executing program 2: 17:48:30 executing program 5: 17:48:30 executing program 4: 17:48:30 executing program 0: 17:48:30 executing program 3: 17:48:30 executing program 1: 17:48:30 executing program 5: 17:48:30 executing program 2: 17:48:30 executing program 4: 17:48:31 executing program 3: 17:48:31 executing program 0: 17:48:31 executing program 1: 17:48:31 executing program 5: 17:48:31 executing program 2: 17:48:31 executing program 4: 17:48:31 executing program 0: 17:48:31 executing program 1: 17:48:31 executing program 3: 17:48:31 executing program 2: 17:48:31 executing program 5: 17:48:31 executing program 4: 17:48:31 executing program 0: 17:48:31 executing program 1: 17:48:31 executing program 3: 17:48:31 executing program 2: 17:48:31 executing program 4: 17:48:31 executing program 5: 17:48:31 executing program 1: 17:48:31 executing program 0: 17:48:31 executing program 3: 17:48:31 executing program 2: 17:48:32 executing program 5: 17:48:32 executing program 1: 17:48:32 executing program 4: 17:48:32 executing program 3: 17:48:32 executing program 0: 17:48:32 executing program 2: 17:48:32 executing program 5: 17:48:32 executing program 1: 17:48:32 executing program 0: 17:48:32 executing program 4: 17:48:32 executing program 3: 17:48:32 executing program 2: 17:48:32 executing program 5: 17:48:32 executing program 4: 17:48:32 executing program 0: 17:48:32 executing program 1: 17:48:32 executing program 3: 17:48:32 executing program 2: 17:48:32 executing program 1: 17:48:32 executing program 4: 17:48:32 executing program 5: 17:48:32 executing program 3: 17:48:33 executing program 2: 17:48:33 executing program 0: 17:48:33 executing program 4: 17:48:33 executing program 1: 17:48:33 executing program 3: 17:48:33 executing program 5: 17:48:33 executing program 2: 17:48:33 executing program 0: 17:48:33 executing program 1: 17:48:33 executing program 4: 17:48:33 executing program 3: 17:48:33 executing program 0: 17:48:33 executing program 5: 17:48:33 executing program 2: 17:48:33 executing program 1: 17:48:33 executing program 3: 17:48:33 executing program 4: 17:48:33 executing program 2: 17:48:33 executing program 5: 17:48:33 executing program 0: 17:48:34 executing program 1: 17:48:34 executing program 3: 17:48:34 executing program 4: 17:48:34 executing program 5: 17:48:34 executing program 0: 17:48:34 executing program 2: 17:48:34 executing program 1: 17:48:34 executing program 3: 17:48:34 executing program 0: 17:48:34 executing program 4: 17:48:34 executing program 5: 17:48:34 executing program 2: 17:48:34 executing program 1: 17:48:34 executing program 3: 17:48:34 executing program 0: 17:48:34 executing program 4: 17:48:34 executing program 5: 17:48:34 executing program 2: 17:48:34 executing program 1: 17:48:34 executing program 4: 17:48:35 executing program 3: 17:48:35 executing program 5: 17:48:35 executing program 2: 17:48:35 executing program 0: 17:48:35 executing program 1: 17:48:35 executing program 3: 17:48:35 executing program 2: 17:48:35 executing program 4: 17:48:35 executing program 1: 17:48:35 executing program 0: 17:48:35 executing program 5: 17:48:35 executing program 3: 17:48:35 executing program 1: 17:48:35 executing program 0: 17:48:35 executing program 2: 17:48:35 executing program 4: 17:48:35 executing program 5: 17:48:35 executing program 3: 17:48:35 executing program 1: 17:48:35 executing program 0: 17:48:35 executing program 2: 17:48:36 executing program 5: 17:48:36 executing program 4: 17:48:36 executing program 1: 17:48:36 executing program 2: 17:48:36 executing program 3: 17:48:36 executing program 0: 17:48:36 executing program 5: 17:48:36 executing program 4: 17:48:36 executing program 2: 17:48:36 executing program 3: 17:48:36 executing program 1: 17:48:36 executing program 0: 17:48:36 executing program 5: 17:48:36 executing program 4: 17:48:36 executing program 3: 17:48:36 executing program 1: 17:48:36 executing program 2: 17:48:36 executing program 0: 17:48:36 executing program 4: 17:48:36 executing program 5: 17:48:37 executing program 3: 17:48:37 executing program 1: 17:48:37 executing program 4: 17:48:37 executing program 2: 17:48:37 executing program 5: 17:48:37 executing program 0: 17:48:37 executing program 3: 17:48:37 executing program 1: 17:48:37 executing program 5: 17:48:37 executing program 0: 17:48:37 executing program 4: 17:48:37 executing program 1: 17:48:37 executing program 3: 17:48:37 executing program 2: 17:48:37 executing program 5: 17:48:37 executing program 1: 17:48:37 executing program 3: 17:48:37 executing program 2: 17:48:37 executing program 0: 17:48:38 executing program 5: 17:48:38 executing program 4: 17:48:38 executing program 3: 17:48:38 executing program 2: 17:48:38 executing program 1: 17:48:38 executing program 4: 17:48:38 executing program 0: 17:48:38 executing program 5: 17:48:38 executing program 3: 17:48:38 executing program 2: 17:48:38 executing program 1: 17:48:38 executing program 4: 17:48:38 executing program 3: 17:48:38 executing program 0: 17:48:38 executing program 5: 17:48:38 executing program 1: 17:48:38 executing program 2: 17:48:38 executing program 4: 17:48:38 executing program 0: 17:48:38 executing program 5: 17:48:38 executing program 3: 17:48:39 executing program 1: 17:48:39 executing program 2: 17:48:39 executing program 4: 17:48:39 executing program 0: 17:48:39 executing program 3: 17:48:39 executing program 5: 17:48:39 executing program 1: 17:48:39 executing program 2: 17:48:39 executing program 4: 17:48:39 executing program 3: 17:48:39 executing program 1: 17:48:39 executing program 0: 17:48:39 executing program 5: 17:48:39 executing program 2: 17:48:39 executing program 4: 17:48:39 executing program 3: 17:48:39 executing program 1: 17:48:39 executing program 0: 17:48:40 executing program 2: 17:48:40 executing program 5: 17:48:40 executing program 3: 17:48:40 executing program 4: 17:48:40 executing program 0: 17:48:40 executing program 1: 17:48:40 executing program 5: 17:48:40 executing program 2: 17:48:40 executing program 3: 17:48:40 executing program 0: 17:48:40 executing program 1: 17:48:40 executing program 5: 17:48:40 executing program 4: 17:48:40 executing program 5: 17:48:40 executing program 2: 17:48:40 executing program 3: 17:48:40 executing program 1: 17:48:40 executing program 0: 17:48:40 executing program 4: 17:48:41 executing program 2: 17:48:41 executing program 1: 17:48:41 executing program 0: 17:48:41 executing program 5: 17:48:41 executing program 3: 17:48:41 executing program 4: 17:48:41 executing program 1: 17:48:41 executing program 2: 17:48:41 executing program 5: 17:48:41 executing program 0: 17:48:41 executing program 3: 17:48:41 executing program 4: 17:48:41 executing program 1: 17:48:41 executing program 2: 17:48:41 executing program 5: 17:48:41 executing program 0: 17:48:41 executing program 3: 17:48:41 executing program 4: 17:48:42 executing program 1: 17:48:42 executing program 5: 17:48:42 executing program 0: 17:48:42 executing program 3: 17:48:42 executing program 2: 17:48:42 executing program 4: 17:48:42 executing program 1: 17:48:42 executing program 5: 17:48:42 executing program 2: 17:48:42 executing program 0: 17:48:42 executing program 3: 17:48:42 executing program 4: 17:48:42 executing program 1: 17:48:42 executing program 5: 17:48:42 executing program 2: 17:48:42 executing program 3: 17:48:42 executing program 0: 17:48:43 executing program 1: 17:48:43 executing program 4: 17:48:43 executing program 5: 17:48:43 executing program 2: 17:48:43 executing program 0: 17:48:43 executing program 3: 17:48:43 executing program 1: 17:48:43 executing program 4: 17:48:43 executing program 5: 17:48:43 executing program 2: 17:48:43 executing program 0: 17:48:43 executing program 3: 17:48:43 executing program 4: 17:48:43 executing program 1: 17:48:43 executing program 5: 17:48:44 executing program 2: 17:48:44 executing program 3: 17:48:44 executing program 0: 17:48:44 executing program 1: 17:48:44 executing program 5: 17:48:44 executing program 4: 17:48:44 executing program 2: 17:48:44 executing program 3: 17:48:44 executing program 0: 17:48:44 executing program 2: 17:48:44 executing program 5: 17:48:44 executing program 1: 17:48:44 executing program 4: 17:48:44 executing program 3: 17:48:44 executing program 0: 17:48:44 executing program 2: 17:48:44 executing program 5: 17:48:44 executing program 1: 17:48:44 executing program 4: 17:48:44 executing program 3: 17:48:45 executing program 0: 17:48:45 executing program 5: 17:48:45 executing program 2: 17:48:45 executing program 3: 17:48:45 executing program 1: 17:48:45 executing program 4: 17:48:45 executing program 0: 17:48:45 executing program 5: 17:48:45 executing program 1: 17:48:45 executing program 2: 17:48:45 executing program 3: 17:48:45 executing program 0: 17:48:45 executing program 4: 17:48:45 executing program 5: 17:48:45 executing program 3: 17:48:45 executing program 1: 17:48:45 executing program 0: 17:48:45 executing program 2: 17:48:45 executing program 5: 17:48:45 executing program 4: 17:48:46 executing program 5: 17:48:46 executing program 3: 17:48:46 executing program 1: 17:48:46 executing program 2: 17:48:46 executing program 0: 17:48:46 executing program 4: 17:48:46 executing program 1: 17:48:46 executing program 5: 17:48:46 executing program 0: 17:48:46 executing program 3: 17:48:46 executing program 4: 17:48:46 executing program 2: 17:48:46 executing program 5: 17:48:46 executing program 1: 17:48:46 executing program 4: 17:48:46 executing program 3: 17:48:46 executing program 0: 17:48:46 executing program 2: 17:48:47 executing program 1: 17:48:47 executing program 4: 17:48:47 executing program 0: 17:48:47 executing program 3: 17:48:47 executing program 5: 17:48:47 executing program 2: 17:48:47 executing program 1: 17:48:47 executing program 0: 17:48:47 executing program 4: 17:48:47 executing program 3: 17:48:47 executing program 5: 17:48:47 executing program 2: 17:48:47 executing program 1: 17:48:47 executing program 0: 17:48:47 executing program 4: 17:48:47 executing program 3: 17:48:47 executing program 1: 17:48:47 executing program 5: 17:48:47 executing program 2: 17:48:48 executing program 3: 17:48:48 executing program 0: 17:48:48 executing program 4: 17:48:48 executing program 1: 17:48:48 executing program 2: 17:48:48 executing program 3: 17:48:48 executing program 0: 17:48:48 executing program 5: 17:48:48 executing program 1: 17:48:48 executing program 2: 17:48:48 executing program 3: 17:48:48 executing program 4: 17:48:48 executing program 1: 17:48:48 executing program 0: 17:48:48 executing program 5: 17:48:48 executing program 4: 17:48:48 executing program 2: 17:48:48 executing program 3: 17:48:49 executing program 1: 17:48:49 executing program 2: 17:48:49 executing program 0: 17:48:49 executing program 5: 17:48:49 executing program 4: 17:48:49 executing program 3: 17:48:49 executing program 1: 17:48:49 executing program 2: 17:48:49 executing program 0: 17:48:49 executing program 5: 17:48:49 executing program 4: 17:48:49 executing program 1: 17:48:49 executing program 3: 17:48:49 executing program 2: 17:48:49 executing program 5: 17:48:49 executing program 4: 17:48:49 executing program 0: 17:48:49 executing program 1: 17:48:49 executing program 2: 17:48:49 executing program 3: 17:48:49 executing program 5: 17:48:50 executing program 4: 17:48:50 executing program 0: 17:48:50 executing program 1: 17:48:50 executing program 2: 17:48:50 executing program 5: 17:48:50 executing program 4: 17:48:50 executing program 3: 17:48:50 executing program 0: 17:48:50 executing program 1: 17:48:50 executing program 2: 17:48:50 executing program 5: 17:48:50 executing program 3: 17:48:50 executing program 4: 17:48:50 executing program 1: 17:48:50 executing program 0: 17:48:50 executing program 2: 17:48:50 executing program 5: 17:48:50 executing program 4: 17:48:50 executing program 3: 17:48:50 executing program 1: 17:48:51 executing program 0: 17:48:51 executing program 2: 17:48:51 executing program 5: 17:48:51 executing program 4: 17:48:51 executing program 3: 17:48:51 executing program 1: 17:48:51 executing program 0: 17:48:51 executing program 2: 17:48:51 executing program 4: 17:48:51 executing program 3: 17:48:51 executing program 5: 17:48:51 executing program 1: 17:48:51 executing program 3: 17:48:51 executing program 0: 17:48:51 executing program 5: 17:48:51 executing program 4: 17:48:51 executing program 2: 17:48:52 executing program 1: 17:48:52 executing program 3: 17:48:52 executing program 2: 17:48:52 executing program 0: 17:48:52 executing program 4: 17:48:52 executing program 5: 17:48:52 executing program 1: 17:48:52 executing program 3: 17:48:52 executing program 2: 17:48:52 executing program 0: 17:48:52 executing program 4: 17:48:52 executing program 5: 17:48:52 executing program 1: 17:48:52 executing program 3: 17:48:52 executing program 2: 17:48:52 executing program 0: 17:48:52 executing program 4: 17:48:52 executing program 5: 17:48:52 executing program 3: 17:48:52 executing program 1: 17:48:53 executing program 2: 17:48:53 executing program 0: 17:48:53 executing program 4: 17:48:53 executing program 3: 17:48:53 executing program 5: 17:48:53 executing program 1: 17:48:53 executing program 0: 17:48:53 executing program 4: 17:48:53 executing program 5: 17:48:53 executing program 3: 17:48:53 executing program 2: 17:48:53 executing program 1: 17:48:53 executing program 0: 17:48:53 executing program 4: 17:48:53 executing program 3: 17:48:53 executing program 5: 17:48:53 executing program 2: 17:48:53 executing program 0: 17:48:53 executing program 1: 17:48:54 executing program 4: 17:48:54 executing program 3: 17:48:54 executing program 5: 17:48:54 executing program 0: 17:48:54 executing program 2: 17:48:54 executing program 3: 17:48:54 executing program 1: 17:48:54 executing program 4: 17:48:54 executing program 5: 17:48:54 executing program 3: 17:48:54 executing program 0: 17:48:54 executing program 2: 17:48:54 executing program 4: 17:48:54 executing program 1: 17:48:54 executing program 5: 17:48:54 executing program 0: 17:48:54 executing program 4: 17:48:54 executing program 3: 17:48:54 executing program 2: 17:48:54 executing program 1: 17:48:54 executing program 5: 17:48:54 executing program 0: 17:48:54 executing program 4: 17:48:55 executing program 3: 17:48:55 executing program 2: 17:48:55 executing program 1: 17:48:55 executing program 5: 17:48:55 executing program 0: 17:48:55 executing program 4: 17:48:55 executing program 3: 17:48:55 executing program 1: 17:48:55 executing program 5: 17:48:55 executing program 2: 17:48:55 executing program 0: 17:48:55 executing program 3: 17:48:55 executing program 4: 17:48:55 executing program 5: 17:48:55 executing program 1: 17:48:55 executing program 0: 17:48:55 executing program 2: 17:48:55 executing program 4: 17:48:55 executing program 3: 17:48:55 executing program 5: 17:48:55 executing program 2: 17:48:55 executing program 1: 17:48:55 executing program 0: 17:48:56 executing program 3: 17:48:56 executing program 4: 17:48:56 executing program 2: 17:48:56 executing program 5: 17:48:56 executing program 1: 17:48:56 executing program 0: 17:48:56 executing program 2: 17:48:56 executing program 4: 17:48:56 executing program 1: 17:48:56 executing program 0: 17:48:56 executing program 3: 17:48:56 executing program 5: 17:48:56 executing program 2: 17:48:56 executing program 2: 17:48:56 executing program 2: 17:48:56 executing program 0: 17:48:56 executing program 4: 17:48:56 executing program 1: 17:48:56 executing program 3: 17:48:56 executing program 5: 17:48:56 executing program 2: 17:48:56 executing program 0: 17:48:56 executing program 4: 17:48:56 executing program 1: 17:48:56 executing program 3: 17:48:57 executing program 2: 17:48:57 executing program 0: 17:48:57 executing program 1: 17:48:57 executing program 3: 17:48:57 executing program 5: 17:48:57 executing program 4: 17:48:57 executing program 0: 17:48:57 executing program 1: 17:48:57 executing program 2: 17:48:57 executing program 3: 17:48:57 executing program 5: 17:48:57 executing program 4: 17:48:57 executing program 0: 17:48:57 executing program 1: 17:48:57 executing program 3: 17:48:57 executing program 2: 17:48:57 executing program 1: 17:48:57 executing program 5: 17:48:57 executing program 0: 17:48:57 executing program 4: 17:48:58 executing program 3: 17:48:58 executing program 2: 17:48:58 executing program 5: 17:48:58 executing program 1: 17:48:58 executing program 0: 17:48:58 executing program 4: 17:48:58 executing program 2: 17:48:58 executing program 5: 17:48:58 executing program 3: 17:48:58 executing program 4: 17:48:58 executing program 0: 17:48:58 executing program 1: 17:48:58 executing program 2: 17:48:58 executing program 5: 17:48:58 executing program 4: 17:48:58 executing program 0: 17:48:58 executing program 2: 17:48:58 executing program 1: 17:48:58 executing program 3: 17:48:58 executing program 5: 17:48:58 executing program 0: 17:48:58 executing program 4: 17:48:58 executing program 3: 17:48:58 executing program 2: 17:48:59 executing program 5: 17:48:59 executing program 1: 17:48:59 executing program 0: 17:48:59 executing program 4: 17:48:59 executing program 3: 17:48:59 executing program 2: 17:48:59 executing program 5: 17:48:59 executing program 0: 17:48:59 executing program 4: 17:48:59 executing program 1: 17:48:59 executing program 3: 17:48:59 executing program 2: 17:48:59 executing program 5: 17:48:59 executing program 0: 17:48:59 executing program 4: 17:48:59 executing program 1: 17:48:59 executing program 3: 17:48:59 executing program 2: 17:48:59 executing program 5: 17:48:59 executing program 4: 17:48:59 executing program 0: 17:48:59 executing program 5: 17:48:59 executing program 1: 17:48:59 executing program 3: 17:49:00 executing program 0: 17:49:00 executing program 2: 17:49:00 executing program 4: 17:49:00 executing program 5: 17:49:00 executing program 3: 17:49:00 executing program 1: 17:49:00 executing program 2: 17:49:00 executing program 4: 17:49:00 executing program 0: 17:49:00 executing program 5: 17:49:00 executing program 3: 17:49:00 executing program 1: 17:49:00 executing program 2: 17:49:00 executing program 4: 17:49:00 executing program 5: 17:49:00 executing program 3: 17:49:00 executing program 0: 17:49:00 executing program 1: 17:49:00 executing program 5: 17:49:00 executing program 4: 17:49:00 executing program 2: 17:49:00 executing program 3: 17:49:01 executing program 1: 17:49:01 executing program 0: 17:49:01 executing program 5: 17:49:01 executing program 4: 17:49:01 executing program 3: 17:49:01 executing program 1: 17:49:01 executing program 0: 17:49:01 executing program 5: 17:49:01 executing program 2: 17:49:01 executing program 4: 17:49:01 executing program 3: 17:49:01 executing program 1: 17:49:01 executing program 0: 17:49:01 executing program 5: 17:49:01 executing program 2: 17:49:01 executing program 4: 17:49:01 executing program 1: 17:49:01 executing program 3: 17:49:01 executing program 0: 17:49:01 executing program 2: 17:49:01 executing program 5: 17:49:01 executing program 1: 17:49:02 executing program 4: 17:49:02 executing program 0: 17:49:02 executing program 2: 17:49:02 executing program 5: 17:49:02 executing program 3: 17:49:02 executing program 1: 17:49:02 executing program 4: 17:49:02 executing program 0: 17:49:02 executing program 2: 17:49:02 executing program 5: 17:49:02 executing program 3: 17:49:02 executing program 1: 17:49:02 executing program 2: 17:49:02 executing program 4: 17:49:02 executing program 0: 17:49:02 executing program 5: 17:49:02 executing program 3: 17:49:02 executing program 1: 17:49:02 executing program 2: 17:49:02 executing program 4: 17:49:02 executing program 0: 17:49:02 executing program 5: 17:49:02 executing program 3: 17:49:03 executing program 2: 17:49:03 executing program 4: 17:49:03 executing program 1: 17:49:03 executing program 0: 17:49:03 executing program 5: 17:49:03 executing program 3: 17:49:03 executing program 4: 17:49:03 executing program 1: 17:49:03 executing program 0: 17:49:03 executing program 2: 17:49:03 executing program 5: 17:49:03 executing program 3: 17:49:03 executing program 4: 17:49:03 executing program 1: 17:49:03 executing program 0: 17:49:03 executing program 2: 17:49:03 executing program 3: 17:49:03 executing program 5: 17:49:03 executing program 4: 17:49:03 executing program 1: 17:49:03 executing program 0: 17:49:03 executing program 2: 17:49:04 executing program 5: 17:49:04 executing program 4: 17:49:04 executing program 3: 17:49:04 executing program 1: 17:49:04 executing program 2: 17:49:04 executing program 0: 17:49:04 executing program 5: 17:49:04 executing program 3: 17:49:04 executing program 4: 17:49:04 executing program 1: 17:49:04 executing program 2: 17:49:04 executing program 3: 17:49:04 executing program 0: 17:49:04 executing program 5: 17:49:04 executing program 4: 17:49:04 executing program 3: 17:49:04 executing program 2: 17:49:04 executing program 1: 17:49:04 executing program 0: 17:49:04 executing program 5: 17:49:04 executing program 3: 17:49:04 executing program 2: 17:49:04 executing program 4: 17:49:04 executing program 1: 17:49:05 executing program 0: 17:49:05 executing program 3: 17:49:05 executing program 5: 17:49:05 executing program 2: 17:49:05 executing program 1: 17:49:05 executing program 0: 17:49:05 executing program 4: 17:49:05 executing program 3: 17:49:05 executing program 2: 17:49:05 executing program 1: 17:49:05 executing program 0: 17:49:05 executing program 5: 17:49:05 executing program 4: 17:49:05 executing program 3: 17:49:05 executing program 2: 17:49:05 executing program 1: 17:49:05 executing program 0: 17:49:05 executing program 4: 17:49:05 executing program 5: 17:49:05 executing program 3: 17:49:05 executing program 2: 17:49:06 executing program 4: 17:49:06 executing program 0: 17:49:06 executing program 3: 17:49:06 executing program 1: 17:49:06 executing program 2: 17:49:06 executing program 5: 17:49:06 executing program 3: 17:49:06 executing program 4: 17:49:06 executing program 0: 17:49:06 executing program 1: 17:49:06 executing program 2: 17:49:06 executing program 5: 17:49:06 executing program 3: 17:49:06 executing program 0: 17:49:06 executing program 4: 17:49:06 executing program 1: 17:49:06 executing program 2: 17:49:06 executing program 5: 17:49:06 executing program 4: 17:49:06 executing program 0: 17:49:06 executing program 3: 17:49:06 executing program 1: 17:49:06 executing program 2: 17:49:07 executing program 5: 17:49:07 executing program 4: 17:49:07 executing program 0: 17:49:07 executing program 1: 17:49:07 executing program 3: 17:49:07 executing program 2: 17:49:07 executing program 5: 17:49:07 executing program 0: 17:49:07 executing program 4: 17:49:07 executing program 1: 17:49:07 executing program 2: 17:49:07 executing program 3: 17:49:07 executing program 0: 17:49:07 executing program 4: 17:49:07 executing program 5: 17:49:07 executing program 2: 17:49:07 executing program 3: 17:49:07 executing program 1: 17:49:07 executing program 4: 17:49:07 executing program 0: 17:49:07 executing program 5: 17:49:07 executing program 2: 17:49:08 executing program 3: 17:49:08 executing program 4: 17:49:08 executing program 1: 17:49:08 executing program 0: 17:49:08 executing program 5: 17:49:08 executing program 2: 17:49:08 executing program 3: 17:49:08 executing program 4: 17:49:08 executing program 1: 17:49:08 executing program 5: 17:49:08 executing program 0: 17:49:08 executing program 2: 17:49:08 executing program 1: 17:49:08 executing program 3: 17:49:08 executing program 4: 17:49:08 executing program 0: 17:49:08 executing program 5: 17:49:08 executing program 2: 17:49:08 executing program 3: 17:49:08 executing program 1: 17:49:08 executing program 0: 17:49:08 executing program 4: 17:49:09 executing program 5: 17:49:09 executing program 2: 17:49:09 executing program 3: 17:49:09 executing program 1: 17:49:09 executing program 0: 17:49:09 executing program 4: 17:49:09 executing program 5: 17:49:09 executing program 1: 17:49:09 executing program 2: 17:49:09 executing program 3: 17:49:09 executing program 4: 17:49:09 executing program 1: 17:49:09 executing program 0: 17:49:09 executing program 5: 17:49:09 executing program 2: 17:49:09 executing program 3: 17:49:09 executing program 0: 17:49:09 executing program 4: 17:49:09 executing program 1: 17:49:09 executing program 5: 17:49:09 executing program 3: 17:49:09 executing program 2: 17:49:09 executing program 0: 17:49:10 executing program 4: 17:49:10 executing program 1: 17:49:10 executing program 3: 17:49:10 executing program 5: 17:49:10 executing program 2: 17:49:10 executing program 0: 17:49:10 executing program 1: 17:49:10 executing program 4: 17:49:10 executing program 5: 17:49:10 executing program 3: 17:49:10 executing program 2: 17:49:10 executing program 0: 17:49:10 executing program 5: 17:49:10 executing program 3: 17:49:10 executing program 0: 17:49:10 executing program 2: 17:49:10 executing program 1: 17:49:10 executing program 4: 17:49:10 executing program 2: 17:49:10 executing program 4: 17:49:10 executing program 5: 17:49:10 executing program 0: 17:49:10 executing program 1: 17:49:10 executing program 3: 17:49:11 executing program 0: 17:49:11 executing program 4: 17:49:11 executing program 1: 17:49:11 executing program 5: 17:49:11 executing program 3: 17:49:11 executing program 2: 17:49:11 executing program 4: 17:49:11 executing program 0: 17:49:11 executing program 3: 17:49:11 executing program 5: 17:49:11 executing program 1: 17:49:11 executing program 2: 17:49:11 executing program 0: 17:49:11 executing program 4: 17:49:11 executing program 3: 17:49:11 executing program 1: 17:49:11 executing program 5: 17:49:11 executing program 2: 17:49:11 executing program 4: 17:49:11 executing program 0: 17:49:11 executing program 3: 17:49:11 executing program 1: 17:49:11 executing program 2: 17:49:12 executing program 5: 17:49:12 executing program 4: 17:49:12 executing program 3: 17:49:12 executing program 1: 17:49:12 executing program 0: 17:49:12 executing program 2: 17:49:12 executing program 5: 17:49:12 executing program 1: 17:49:12 executing program 3: 17:49:12 executing program 0: 17:49:12 executing program 2: 17:49:12 executing program 4: 17:49:12 executing program 1: 17:49:12 executing program 5: 17:49:12 executing program 3: 17:49:12 executing program 0: 17:49:12 executing program 4: 17:49:12 executing program 2: 17:49:12 executing program 1: 17:49:12 executing program 3: 17:49:12 executing program 5: 17:49:12 executing program 0: 17:49:12 executing program 2: 17:49:13 executing program 1: 17:49:13 executing program 4: 17:49:13 executing program 5: 17:49:13 executing program 0: 17:49:13 executing program 3: 17:49:13 executing program 2: 17:49:13 executing program 1: 17:49:13 executing program 4: 17:49:13 executing program 0: 17:49:13 executing program 2: 17:49:13 executing program 5: 17:49:13 executing program 3: 17:49:13 executing program 1: 17:49:13 executing program 4: 17:49:13 executing program 0: 17:49:13 executing program 5: 17:49:13 executing program 2: 17:49:13 executing program 3: 17:49:13 executing program 4: 17:49:13 executing program 0: 17:49:13 executing program 5: 17:49:13 executing program 1: 17:49:14 executing program 2: 17:49:14 executing program 3: 17:49:14 executing program 5: 17:49:14 executing program 0: 17:49:14 executing program 4: 17:49:14 executing program 1: 17:49:14 executing program 2: 17:49:14 executing program 3: 17:49:14 executing program 4: 17:49:14 executing program 1: 17:49:14 executing program 5: 17:49:14 executing program 0: 17:49:14 executing program 2: 17:49:14 executing program 3: 17:49:14 executing program 1: 17:49:14 executing program 5: 17:49:14 executing program 4: 17:49:14 executing program 0: 17:49:14 executing program 3: 17:49:14 executing program 1: 17:49:14 executing program 2: 17:49:14 executing program 5: 17:49:14 executing program 4: 17:49:14 executing program 0: 17:49:15 executing program 3: 17:49:15 executing program 1: 17:49:15 executing program 2: 17:49:15 executing program 5: 17:49:15 executing program 4: 17:49:15 executing program 0: 17:49:15 executing program 3: 17:49:15 executing program 1: 17:49:15 executing program 2: 17:49:15 executing program 4: 17:49:15 executing program 5: 17:49:15 executing program 0: 17:49:15 executing program 3: 17:49:15 executing program 2: 17:49:15 executing program 4: 17:49:15 executing program 5: 17:49:15 executing program 0: 17:49:15 executing program 1: 17:49:15 executing program 3: 17:49:15 executing program 2: 17:49:16 executing program 0: 17:49:16 executing program 4: 17:49:16 executing program 5: 17:49:16 executing program 1: 17:49:16 executing program 3: 17:49:16 executing program 2: 17:49:16 executing program 0: 17:49:16 executing program 5: 17:49:16 executing program 1: 17:49:16 executing program 4: 17:49:16 executing program 3: 17:49:16 executing program 2: 17:49:16 executing program 0: 17:49:16 executing program 4: 17:49:16 executing program 5: 17:49:16 executing program 1: 17:49:16 executing program 3: 17:49:16 executing program 2: 17:49:16 executing program 0: 17:49:16 executing program 4: 17:49:16 executing program 1: 17:49:16 executing program 5: 17:49:16 executing program 3: 17:49:16 executing program 2: 17:49:16 executing program 0: 17:49:17 executing program 4: 17:49:17 executing program 3: 17:49:17 executing program 2: 17:49:17 executing program 5: 17:49:17 executing program 1: 17:49:17 executing program 0: 17:49:17 executing program 3: 17:49:17 executing program 4: 17:49:17 executing program 2: 17:49:17 executing program 1: 17:49:17 executing program 0: 17:49:17 executing program 4: 17:49:17 executing program 3: 17:49:17 executing program 5: 17:49:17 executing program 2: 17:49:17 executing program 0: 17:49:17 executing program 1: 17:49:17 executing program 4: 17:49:17 executing program 5: 17:49:17 executing program 1: 17:49:17 executing program 2: 17:49:17 executing program 3: 17:49:17 executing program 0: 17:49:18 executing program 4: 17:49:18 executing program 5: 17:49:18 executing program 1: 17:49:18 executing program 2: 17:49:18 executing program 3: 17:49:18 executing program 4: 17:49:18 executing program 5: 17:49:18 executing program 0: 17:49:18 executing program 1: 17:49:18 executing program 2: 17:49:18 executing program 3: 17:49:18 executing program 4: 17:49:18 executing program 5: 17:49:18 executing program 0: 17:49:18 executing program 1: 17:49:18 executing program 2: 17:49:18 executing program 3: 17:49:18 executing program 4: 17:49:18 executing program 0: 17:49:18 executing program 5: 17:49:18 executing program 1: 17:49:18 executing program 2: 17:49:18 executing program 4: 17:49:19 executing program 3: 17:49:19 executing program 5: 17:49:19 executing program 0: 17:49:19 executing program 1: 17:49:19 executing program 4: 17:49:19 executing program 2: 17:49:19 executing program 5: 17:49:19 executing program 1: 17:49:19 executing program 3: 17:49:19 executing program 0: 17:49:19 executing program 2: 17:49:19 executing program 4: 17:49:19 executing program 5: 17:49:19 executing program 3: 17:49:19 executing program 1: 17:49:19 executing program 0: 17:49:19 executing program 4: 17:49:19 executing program 2: 17:49:19 executing program 5: 17:49:19 executing program 3: 17:49:19 executing program 1: 17:49:19 executing program 0: 17:49:20 executing program 2: 17:49:20 executing program 4: 17:49:20 executing program 5: 17:49:20 executing program 3: 17:49:20 executing program 0: 17:49:20 executing program 1: 17:49:20 executing program 2: 17:49:20 executing program 5: 17:49:20 executing program 4: 17:49:20 executing program 3: 17:49:20 executing program 1: 17:49:20 executing program 0: 17:49:20 executing program 5: 17:49:20 executing program 2: 17:49:20 executing program 3: 17:49:20 executing program 0: 17:49:20 executing program 4: 17:49:20 executing program 3: 17:49:20 executing program 5: 17:49:20 executing program 1: 17:49:20 executing program 4: 17:49:20 executing program 0: 17:49:20 executing program 2: 17:49:20 executing program 5: 17:49:21 executing program 3: 17:49:21 executing program 1: 17:49:21 executing program 4: 17:49:21 executing program 0: 17:49:21 executing program 2: 17:49:21 executing program 3: 17:49:21 executing program 5: 17:49:21 executing program 1: 17:49:21 executing program 4: 17:49:21 executing program 0: 17:49:21 executing program 2: 17:49:21 executing program 5: 17:49:21 executing program 3: 17:49:21 executing program 1: 17:49:21 executing program 4: 17:49:21 executing program 2: 17:49:21 executing program 5: 17:49:21 executing program 0: 17:49:21 executing program 3: 17:49:21 executing program 1: 17:49:21 executing program 4: 17:49:22 executing program 2: 17:49:22 executing program 5: 17:49:22 executing program 3: 17:49:22 executing program 0: 17:49:22 executing program 1: 17:49:22 executing program 4: 17:49:22 executing program 2: 17:49:22 executing program 3: 17:49:22 executing program 5: 17:49:22 executing program 1: 17:49:22 executing program 0: 17:49:22 executing program 2: 17:49:22 executing program 4: 17:49:22 executing program 3: 17:49:22 executing program 1: 17:49:22 executing program 0: 17:49:22 executing program 2: 17:49:22 executing program 5: 17:49:22 executing program 3: 17:49:22 executing program 4: 17:49:22 executing program 1: 17:49:23 executing program 5: 17:49:23 executing program 2: 17:49:23 executing program 0: 17:49:23 executing program 4: 17:49:23 executing program 3: 17:49:23 executing program 1: 17:49:23 executing program 0: 17:49:23 executing program 2: 17:49:23 executing program 5: 17:49:23 executing program 4: 17:49:23 executing program 3: 17:49:23 executing program 1: 17:49:23 executing program 2: 17:49:23 executing program 0: 17:49:23 executing program 4: 17:49:23 executing program 5: 17:49:23 executing program 3: 17:49:23 executing program 1: 17:49:23 executing program 2: 17:49:23 executing program 0: 17:49:23 executing program 5: 17:49:23 executing program 4: 17:49:23 executing program 1: 17:49:24 executing program 2: 17:49:24 executing program 3: 17:49:24 executing program 0: 17:49:24 executing program 5: 17:49:24 executing program 4: 17:49:24 executing program 1: 17:49:24 executing program 2: 17:49:24 executing program 5: 17:49:24 executing program 3: 17:49:24 executing program 0: 17:49:24 executing program 4: 17:49:24 executing program 1: 17:49:24 executing program 2: 17:49:24 executing program 5: 17:49:24 executing program 0: 17:49:24 executing program 3: 17:49:24 executing program 2: 17:49:24 executing program 4: 17:49:24 executing program 1: 17:49:24 executing program 5: 17:49:24 executing program 0: 17:49:24 executing program 3: 17:49:24 executing program 4: 17:49:24 executing program 5: 17:49:24 executing program 2: 17:49:24 executing program 1: 17:49:25 executing program 3: 17:49:25 executing program 1: 17:49:25 executing program 0: 17:49:25 executing program 4: 17:49:25 executing program 5: 17:49:25 executing program 2: 17:49:25 executing program 3: 17:49:25 executing program 1: 17:49:25 executing program 0: 17:49:25 executing program 4: 17:49:25 executing program 5: 17:49:25 executing program 3: 17:49:25 executing program 2: 17:49:25 executing program 0: 17:49:25 executing program 4: 17:49:25 executing program 5: 17:49:25 executing program 3: 17:49:25 executing program 1: 17:49:25 executing program 0: 17:49:25 executing program 4: 17:49:25 executing program 2: 17:49:25 executing program 3: 17:49:26 executing program 1: 17:49:26 executing program 5: 17:49:26 executing program 4: 17:49:26 executing program 0: 17:49:26 executing program 3: 17:49:26 executing program 1: 17:49:26 executing program 5: 17:49:26 executing program 2: 17:49:26 executing program 0: 17:49:26 executing program 4: 17:49:26 executing program 3: 17:49:26 executing program 4: 17:49:26 executing program 5: 17:49:26 executing program 0: 17:49:26 executing program 1: 17:49:26 executing program 2: 17:49:26 executing program 3: 17:49:26 executing program 4: 17:49:26 executing program 0: 17:49:26 executing program 5: 17:49:26 executing program 1: 17:49:26 executing program 3: 17:49:26 executing program 2: 17:49:27 executing program 4: 17:49:27 executing program 5: 17:49:27 executing program 0: 17:49:27 executing program 1: 17:49:27 executing program 2: 17:49:27 executing program 3: 17:49:27 executing program 4: 17:49:27 executing program 5: 17:49:27 executing program 0: 17:49:27 executing program 3: 17:49:27 executing program 1: 17:49:27 executing program 2: 17:49:27 executing program 5: 17:49:27 executing program 4: 17:49:27 executing program 0: 17:49:27 executing program 3: 17:49:27 executing program 1: 17:49:27 executing program 5: 17:49:27 executing program 2: 17:49:27 executing program 4: 17:49:27 executing program 0: 17:49:27 executing program 3: 17:49:27 executing program 1: 17:49:28 executing program 4: 17:49:28 executing program 5: 17:49:28 executing program 2: 17:49:28 executing program 3: 17:49:28 executing program 0: 17:49:28 executing program 1: 17:49:28 executing program 4: 17:49:28 executing program 5: 17:49:28 executing program 3: 17:49:28 executing program 0: 17:49:28 executing program 1: 17:49:28 executing program 2: 17:49:28 executing program 5: 17:49:28 executing program 3: 17:49:28 executing program 4: 17:49:28 executing program 1: 17:49:28 executing program 0: 17:49:28 executing program 2: 17:49:28 executing program 5: 17:49:28 executing program 4: 17:49:28 executing program 3: 17:49:28 executing program 1: 17:49:28 executing program 0: 17:49:29 executing program 2: 17:49:29 executing program 3: 17:49:29 executing program 4: 17:49:29 executing program 5: 17:49:29 executing program 1: 17:49:29 executing program 0: 17:49:29 executing program 2: 17:49:29 executing program 3: 17:49:29 executing program 4: 17:49:29 executing program 5: 17:49:29 executing program 1: 17:49:29 executing program 2: 17:49:29 executing program 0: 17:49:29 executing program 5: 17:49:29 executing program 3: 17:49:29 executing program 4: 17:49:29 executing program 1: 17:49:29 executing program 0: 17:49:29 executing program 2: 17:49:29 executing program 3: 17:49:29 executing program 5: 17:49:29 executing program 4: 17:49:29 executing program 2: 17:49:30 executing program 1: 17:49:30 executing program 0: 17:49:30 executing program 3: 17:49:30 executing program 5: 17:49:30 executing program 4: 17:49:30 executing program 2: 17:49:30 executing program 1: 17:49:30 executing program 0: 17:49:30 executing program 5: 17:49:30 executing program 3: 17:49:30 executing program 2: 17:49:30 executing program 4: 17:49:30 executing program 1: 17:49:30 executing program 3: 17:49:30 executing program 5: 17:49:30 executing program 0: 17:49:30 executing program 2: 17:49:30 executing program 4: 17:49:30 executing program 1: 17:49:30 executing program 3: 17:49:30 executing program 5: 17:49:30 executing program 0: 17:49:31 executing program 2: 17:49:31 executing program 4: 17:49:31 executing program 1: 17:49:31 executing program 5: 17:49:31 executing program 4: 17:49:31 executing program 3: 17:49:31 executing program 0: 17:49:31 executing program 2: 17:49:31 executing program 1: 17:49:31 executing program 4: 17:49:31 executing program 5: 17:49:31 executing program 3: 17:49:31 executing program 1: 17:49:31 executing program 2: 17:49:31 executing program 0: 17:49:31 executing program 1: 17:49:31 executing program 4: 17:49:31 executing program 5: 17:49:31 executing program 0: 17:49:31 executing program 3: 17:49:31 executing program 2: 17:49:31 executing program 4: 17:49:31 executing program 1: 17:49:32 executing program 5: 17:49:32 executing program 0: 17:49:32 executing program 3: 17:49:32 executing program 2: 17:49:32 executing program 4: 17:49:32 executing program 1: 17:49:32 executing program 0: 17:49:32 executing program 5: 17:49:32 executing program 2: 17:49:32 executing program 3: 17:49:32 executing program 4: 17:49:32 executing program 1: 17:49:32 executing program 0: 17:49:32 executing program 5: 17:49:32 executing program 2: 17:49:32 executing program 1: 17:49:32 executing program 3: 17:49:32 executing program 4: 17:49:32 executing program 5: 17:49:32 executing program 0: 17:49:32 executing program 2: 17:49:32 executing program 1: 17:49:32 executing program 3: 17:49:32 executing program 4: 17:49:33 executing program 2: 17:49:33 executing program 0: 17:49:33 executing program 3: 17:49:33 executing program 4: 17:49:33 executing program 5: 17:49:33 executing program 1: 17:49:33 executing program 0: 17:49:33 executing program 2: 17:49:33 executing program 3: 17:49:33 executing program 4: 17:49:33 executing program 5: 17:49:33 executing program 0: 17:49:33 executing program 1: 17:49:33 executing program 2: 17:49:33 executing program 3: 17:49:33 executing program 4: 17:49:33 executing program 5: 17:49:33 executing program 0: 17:49:33 executing program 1: 17:49:33 executing program 2: 17:49:33 executing program 4: 17:49:34 executing program 3: 17:49:34 executing program 5: 17:49:34 executing program 0: 17:49:34 executing program 1: 17:49:34 executing program 2: 17:49:34 executing program 4: 17:49:34 executing program 3: 17:49:34 executing program 0: 17:49:34 executing program 5: 17:49:34 executing program 1: 17:49:34 executing program 2: 17:49:34 executing program 0: 17:49:34 executing program 5: 17:49:34 executing program 3: 17:49:34 executing program 4: 17:49:34 executing program 1: 17:49:34 executing program 2: 17:49:34 executing program 5: 17:49:34 executing program 4: 17:49:34 executing program 1: 17:49:34 executing program 3: 17:49:34 executing program 0: 17:49:34 executing program 2: 17:49:35 executing program 5: 17:49:35 executing program 4: 17:49:35 executing program 1: 17:49:35 executing program 3: 17:49:35 executing program 0: 17:49:35 executing program 2: 17:49:35 executing program 5: 17:49:35 executing program 4: 17:49:35 executing program 0: 17:49:35 executing program 3: 17:49:35 executing program 1: 17:49:35 executing program 2: 17:49:35 executing program 5: 17:49:35 executing program 4: 17:49:35 executing program 3: 17:49:35 executing program 0: 17:49:35 executing program 2: 17:49:35 executing program 5: 17:49:35 executing program 4: 17:49:35 executing program 1: 17:49:35 executing program 0: 17:49:35 executing program 3: 17:49:35 executing program 2: 17:49:35 executing program 5: 17:49:36 executing program 1: 17:49:36 executing program 0: 17:49:36 executing program 4: 17:49:36 executing program 3: 17:49:36 executing program 2: 17:49:36 executing program 5: 17:49:36 executing program 1: 17:49:36 executing program 0: 17:49:36 executing program 3: 17:49:36 executing program 2: 17:49:36 executing program 4: 17:49:36 executing program 5: 17:49:36 executing program 0: 17:49:36 executing program 1: 17:49:36 executing program 3: 17:49:36 executing program 2: 17:49:36 executing program 4: 17:49:36 executing program 5: 17:49:36 executing program 0: 17:49:36 executing program 1: 17:49:36 executing program 3: 17:49:36 executing program 4: 17:49:37 executing program 2: 17:49:37 executing program 5: 17:49:37 executing program 0: 17:49:37 executing program 1: 17:49:37 executing program 3: 17:49:37 executing program 4: 17:49:37 executing program 0: 17:49:37 executing program 2: 17:49:37 executing program 5: 17:49:37 executing program 1: 17:49:37 executing program 3: 17:49:37 executing program 4: 17:49:37 executing program 0: 17:49:37 executing program 5: 17:49:37 executing program 2: 17:49:37 executing program 1: 17:49:37 executing program 3: 17:49:37 executing program 4: 17:49:37 executing program 5: 17:49:37 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r0, 0x401, 0x0) 17:49:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x4e22, 0x1eb740cb, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, {{0xa, 0x4e22, 0x81, @dev={0xfe, 0x80, [], 0x3e}, 0x8}}}, 0x108) 17:49:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x0) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x0) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) [ 688.277060][ T27] audit: type=1804 audit(1581788978.074:271): pid=22537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir735327012/syzkaller.PYAtov/975/bus" dev="sda1" ino=16777 res=1 [ 688.297402][T22537] attempt to access beyond end of device [ 688.307302][T22537] loop1: rw=2049, want=78, limit=63 [ 688.318679][T22537] buffer_io_error: 26 callbacks suppressed 17:49:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) [ 688.318693][T22537] Buffer I/O error on dev loop1, logical block 77, lost async page write 17:49:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:38 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 688.375059][ T27] audit: type=1804 audit(1581788978.144:272): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1072/bus" dev="sda1" ino=16778 res=1 [ 688.392736][T22537] attempt to access beyond end of device [ 688.504471][T22530] attempt to access beyond end of device [ 688.515785][T22549] overlayfs: workdir and upperdir must be separate subtrees [ 688.528350][T22537] loop1: rw=2049, want=79, limit=63 17:49:38 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540), 0x0}, 0x20) [ 688.555813][T22530] loop2: rw=2049, want=78, limit=63 [ 688.572420][T22537] Buffer I/O error on dev loop1, logical block 78, lost async page write [ 688.586291][T22530] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 688.638186][T22537] attempt to access beyond end of device [ 688.645211][T22530] attempt to access beyond end of device [ 688.651179][T22530] loop2: rw=2049, want=79, limit=63 [ 688.656549][T22530] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 688.665562][T22530] attempt to access beyond end of device [ 688.679672][T22530] loop2: rw=2049, want=80, limit=63 [ 688.684500][T22537] loop1: rw=2049, want=80, limit=63 [ 688.698102][T22530] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 688.706610][ T27] audit: type=1804 audit(1581788978.494:273): pid=22544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir298578491/syzkaller.o7mZ3n/1075/bus" dev="sda1" ino=16781 res=1 17:49:38 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540), 0x0}, 0x20) [ 688.711656][T22537] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 688.731536][T22530] attempt to access beyond end of device [ 688.749003][T22537] attempt to access beyond end of device [ 688.758591][T22537] loop1: rw=2049, want=81, limit=63 [ 688.766370][T22537] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 688.774861][ T27] audit: type=1804 audit(1581788978.564:274): pid=22552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/796/bus" dev="sda1" ino=16782 res=1 [ 688.808611][T22530] loop2: rw=2049, want=81, limit=63 [ 688.814237][T22530] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 688.822797][T22537] attempt to access beyond end of device [ 688.837796][T22530] attempt to access beyond end of device [ 688.844701][T22537] loop1: rw=2049, want=130, limit=63 [ 688.858929][T22530] loop2: rw=2049, want=130, limit=63 [ 688.864748][T22544] attempt to access beyond end of device [ 688.867551][T22537] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 688.885775][T22552] attempt to access beyond end of device [ 688.892220][T22544] loop4: rw=2049, want=78, limit=63 [ 688.897472][T22530] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 688.906966][T22544] attempt to access beyond end of device [ 688.918590][T22530] attempt to access beyond end of device [ 688.921254][T22552] loop5: rw=2049, want=78, limit=63 [ 688.924314][T22537] attempt to access beyond end of device [ 688.930492][T22552] attempt to access beyond end of device [ 688.944874][T22552] loop5: rw=2049, want=79, limit=63 [ 688.951147][T22552] attempt to access beyond end of device [ 688.956940][T22552] loop5: rw=2049, want=80, limit=63 [ 688.958576][T22544] loop4: rw=2049, want=79, limit=63 [ 688.965982][T22552] attempt to access beyond end of device [ 688.967361][T22544] attempt to access beyond end of device [ 688.967376][T22544] loop4: rw=2049, want=80, limit=63 [ 688.967392][T22544] attempt to access beyond end of device 17:49:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:38 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540), 0x0}, 0x20) [ 688.980813][T22552] loop5: rw=2049, want=81, limit=63 [ 688.984120][T22537] loop1: rw=2049, want=131, limit=63 [ 689.000220][T22530] loop2: rw=2049, want=131, limit=63 [ 689.005519][T22530] attempt to access beyond end of device [ 689.022455][T22552] attempt to access beyond end of device [ 689.022709][T22530] loop2: rw=2049, want=132, limit=63 [ 689.054101][T22544] loop4: rw=2049, want=81, limit=63 [ 689.059725][T22552] loop5: rw=2049, want=130, limit=63 [ 689.065024][T22552] attempt to access beyond end of device [ 689.075164][T22530] attempt to access beyond end of device [ 689.083520][T22537] attempt to access beyond end of device [ 689.091586][T22544] attempt to access beyond end of device [ 689.100017][T22530] loop2: rw=2049, want=133, limit=63 [ 689.107120][T22552] loop5: rw=2049, want=131, limit=63 [ 689.112481][T22537] loop1: rw=2049, want=132, limit=63 [ 689.117824][T22544] loop4: rw=2049, want=130, limit=63 [ 689.123182][T22530] attempt to access beyond end of device [ 689.130566][T22552] attempt to access beyond end of device [ 689.136413][T22552] loop5: rw=2049, want=132, limit=63 [ 689.148601][T22537] attempt to access beyond end of device [ 689.155365][T22530] loop2: rw=2049, want=142, limit=63 [ 689.160755][T22544] attempt to access beyond end of device [ 689.173103][T22552] attempt to access beyond end of device [ 689.181329][T22537] loop1: rw=2049, want=133, limit=63 [ 689.187756][T22530] attempt to access beyond end of device [ 689.195666][T22544] loop4: rw=2049, want=131, limit=63 17:49:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, 0xffffffffffffffff) [ 689.201556][T22530] loop2: rw=2049, want=143, limit=63 [ 689.206935][T22530] attempt to access beyond end of device [ 689.215089][T22530] loop2: rw=2049, want=144, limit=63 [ 689.216178][T22537] attempt to access beyond end of device [ 689.221104][T22530] attempt to access beyond end of device [ 689.226066][T22552] loop5: rw=2049, want=133, limit=63 [ 689.231992][T22530] loop2: rw=2049, want=145, limit=63 [ 689.245307][T22530] attempt to access beyond end of device [ 689.252466][T22530] loop2: rw=2049, want=153, limit=63 [ 689.258098][T22557] attempt to access beyond end of device [ 689.261408][T22544] attempt to access beyond end of device [ 689.266931][T22557] loop2: rw=2049, want=78, limit=63 [ 689.269781][T22552] attempt to access beyond end of device [ 689.274805][T22557] attempt to access beyond end of device [ 689.282748][ T27] audit: type=1804 audit(1581788979.084:275): pid=22574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir315294111/syzkaller.fO3c42/960/bus" dev="sda1" ino=16929 res=1 [ 689.293143][T22537] loop1: rw=2049, want=142, limit=63 [ 689.329782][T22552] loop5: rw=2049, want=142, limit=63 [ 689.338674][T22537] attempt to access beyond end of device [ 689.344519][T22557] loop2: rw=2049, want=79, limit=63 [ 689.351176][T22557] attempt to access beyond end of device [ 689.356853][T22537] loop1: rw=2049, want=143, limit=63 [ 689.369718][T22544] loop4: rw=2049, want=132, limit=63 [ 689.372370][T22552] attempt to access beyond end of device [ 689.386821][T22557] loop2: rw=2049, want=80, limit=63 [ 689.394941][T22537] attempt to access beyond end of device [ 689.400930][T22557] attempt to access beyond end of device 17:49:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 689.403917][T22544] attempt to access beyond end of device [ 689.406655][T22537] loop1: rw=2049, want=144, limit=63 [ 689.414462][T22544] loop4: rw=2049, want=133, limit=63 [ 689.425669][T22544] attempt to access beyond end of device [ 689.431419][T22544] loop4: rw=2049, want=142, limit=63 [ 689.437198][T22544] attempt to access beyond end of device [ 689.441437][T22552] loop5: rw=2049, want=143, limit=63 [ 689.443080][T22544] loop4: rw=2049, want=143, limit=63 [ 689.453581][T22544] attempt to access beyond end of device [ 689.459334][T22544] loop4: rw=2049, want=144, limit=63 [ 689.464734][T22544] attempt to access beyond end of device [ 689.470464][T22544] loop4: rw=2049, want=145, limit=63 [ 689.475856][T22544] attempt to access beyond end of device [ 689.480854][T22552] attempt to access beyond end of device [ 689.481634][T22544] loop4: rw=2049, want=153, limit=63 [ 689.492657][T22537] attempt to access beyond end of device [ 689.498438][T22557] loop2: rw=2049, want=81, limit=63 [ 689.500831][T22552] loop5: rw=2049, want=144, limit=63 [ 689.505070][T22557] attempt to access beyond end of device [ 689.514682][T22537] loop1: rw=2049, want=145, limit=63 [ 689.520359][T22557] loop2: rw=2049, want=130, limit=63 [ 689.521804][T22555] attempt to access beyond end of device [ 689.525890][T22537] attempt to access beyond end of device [ 689.537779][T22574] attempt to access beyond end of device [ 689.543522][T22557] attempt to access beyond end of device [ 689.549341][T22574] loop0: rw=2049, want=78, limit=63 [ 689.554056][T22552] attempt to access beyond end of device [ 689.562317][T22555] loop4: rw=2049, want=78, limit=63 [ 689.571537][T22552] loop5: rw=2049, want=145, limit=63 [ 689.573627][T22537] loop1: rw=2049, want=153, limit=63 [ 689.578640][T22557] loop2: rw=2049, want=131, limit=63 [ 689.584005][T22555] attempt to access beyond end of device [ 689.593287][T22557] attempt to access beyond end of device [ 689.601135][T22552] attempt to access beyond end of device [ 689.605816][T22555] loop4: rw=2049, want=79, limit=63 [ 689.606827][T22557] loop2: rw=2049, want=132, limit=63 [ 689.606845][T22557] attempt to access beyond end of device [ 689.606856][T22557] loop2: rw=2049, want=133, limit=63 [ 689.606899][T22557] attempt to access beyond end of device [ 689.606949][T22557] loop2: rw=2049, want=142, limit=63 [ 689.613618][T22574] attempt to access beyond end of device [ 689.620488][T22552] loop5: rw=2049, want=153, limit=63 [ 689.625414][T22555] attempt to access beyond end of device [ 689.629303][T22557] attempt to access beyond end of device [ 689.639149][T22574] loop0: rw=2049, want=79, limit=63 [ 689.642091][T22566] attempt to access beyond end of device [ 689.647503][T22555] loop4: rw=2049, want=80, limit=63 [ 689.652053][T22557] loop2: rw=2049, want=143, limit=63 [ 689.660575][T22555] attempt to access beyond end of device [ 689.664339][T22557] attempt to access beyond end of device [ 689.667112][T22555] loop4: rw=2049, want=81, limit=63 [ 689.673452][T22566] loop5: rw=2049, want=78, limit=63 17:49:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 689.678031][T22574] attempt to access beyond end of device [ 689.686301][T22557] loop2: rw=2049, want=144, limit=63 [ 689.713487][T22574] loop0: rw=2049, want=80, limit=63 [ 689.732277][T22574] attempt to access beyond end of device [ 689.738757][T22557] attempt to access beyond end of device [ 689.744441][T22566] attempt to access beyond end of device [ 689.752642][T22557] loop2: rw=2049, want=145, limit=63 [ 689.758002][T22566] loop5: rw=2049, want=79, limit=63 [ 689.771591][T22574] loop0: rw=2049, want=81, limit=63 [ 689.781325][T22566] attempt to access beyond end of device [ 689.789356][T22583] attempt to access beyond end of device [ 689.795403][T22566] loop5: rw=2049, want=80, limit=63 [ 689.799290][T22583] loop0: rw=2049, want=78, limit=63 [ 689.806436][T22583] attempt to access beyond end of device [ 689.812567][T22583] loop0: rw=2049, want=79, limit=63 [ 689.818177][T22583] attempt to access beyond end of device [ 689.824000][T22566] attempt to access beyond end of device [ 689.824328][T22583] loop0: rw=2049, want=80, limit=63 [ 689.835302][T22583] attempt to access beyond end of device [ 689.841310][T22583] loop0: rw=2049, want=81, limit=63 [ 689.860968][T22566] loop5: rw=2049, want=81, limit=63 17:49:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x0) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) [ 689.882373][T22566] attempt to access beyond end of device [ 689.899816][T22566] loop5: rw=2049, want=130, limit=63 [ 689.908213][T22566] attempt to access beyond end of device [ 689.921878][T22566] loop5: rw=2049, want=131, limit=63 [ 689.936733][T22566] attempt to access beyond end of device [ 689.942680][T22566] loop5: rw=2049, want=132, limit=63 [ 689.948203][T22566] attempt to access beyond end of device [ 689.954291][T22566] loop5: rw=2049, want=133, limit=63 [ 689.959978][T22566] attempt to access beyond end of device [ 690.004796][T22566] loop5: rw=2049, want=142, limit=63 [ 690.010324][T22566] attempt to access beyond end of device [ 690.017079][T22566] loop5: rw=2049, want=143, limit=63 [ 690.034113][T22566] attempt to access beyond end of device [ 690.052394][T22566] loop5: rw=2049, want=144, limit=63 [ 690.058738][T22566] attempt to access beyond end of device [ 690.086738][T22566] loop5: rw=2049, want=145, limit=63 [ 690.133827][ T27] audit: type=1804 audit(1581788979.934:276): pid=22599 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1073/bus" dev="sda1" ino=16483 res=1 [ 690.178487][ T27] audit: type=1804 audit(1581788979.954:277): pid=22593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir735327012/syzkaller.PYAtov/976/bus" dev="sda1" ino=16529 res=1 [ 690.203825][T22599] attempt to access beyond end of device [ 690.231497][T22599] loop2: rw=2049, want=78, limit=63 [ 690.236815][T22599] attempt to access beyond end of device [ 690.249180][T22599] loop2: rw=2049, want=79, limit=63 [ 690.254662][T22599] attempt to access beyond end of device [ 690.254880][T22593] attempt to access beyond end of device [ 690.260516][T22599] loop2: rw=2049, want=80, limit=63 [ 690.271326][T22599] attempt to access beyond end of device 17:49:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) [ 690.277041][T22599] loop2: rw=2049, want=81, limit=63 [ 690.280914][T22593] loop1: rw=2049, want=78, limit=63 [ 690.282292][T22599] attempt to access beyond end of device [ 690.288422][T22593] attempt to access beyond end of device [ 690.293076][T22599] loop2: rw=2049, want=130, limit=63 [ 690.293095][T22599] attempt to access beyond end of device [ 690.293107][T22599] loop2: rw=2049, want=131, limit=63 [ 690.293174][T22599] attempt to access beyond end of device [ 690.293271][T22599] loop2: rw=2049, want=132, limit=63 [ 690.310857][T22593] loop1: rw=2049, want=79, limit=63 [ 690.333002][T22599] attempt to access beyond end of device [ 690.338758][T22599] loop2: rw=2049, want=133, limit=63 [ 690.344108][T22599] attempt to access beyond end of device [ 690.349814][T22599] loop2: rw=2049, want=142, limit=63 [ 690.355141][T22599] attempt to access beyond end of device [ 690.360887][T22599] loop2: rw=2049, want=143, limit=63 [ 690.369271][T22599] attempt to access beyond end of device [ 690.374986][T22599] loop2: rw=2049, want=144, limit=63 [ 690.380346][T22599] attempt to access beyond end of device [ 690.386023][T22599] loop2: rw=2049, want=145, limit=63 [ 690.391437][T22599] attempt to access beyond end of device [ 690.397143][T22599] loop2: rw=2049, want=153, limit=63 [ 690.402883][T22593] attempt to access beyond end of device [ 690.403941][T22603] attempt to access beyond end of device [ 690.408589][T22593] loop1: rw=2049, want=80, limit=63 [ 690.419690][T22593] attempt to access beyond end of device [ 690.479376][ T27] audit: type=1804 audit(1581788980.284:278): pid=22605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir298578491/syzkaller.o7mZ3n/1076/bus" dev="sda1" ino=16784 res=1 [ 690.486206][T22603] loop2: rw=2049, want=78, limit=63 [ 690.513632][T22593] loop1: rw=2049, want=81, limit=63 [ 690.554007][T22605] attempt to access beyond end of device [ 690.568224][T22605] loop4: rw=2049, want=78, limit=63 [ 690.573489][T22605] attempt to access beyond end of device [ 690.579213][T22605] loop4: rw=2049, want=79, limit=63 [ 690.584459][T22605] attempt to access beyond end of device [ 690.590155][T22605] loop4: rw=2049, want=80, limit=63 [ 690.595429][T22605] attempt to access beyond end of device 17:49:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) dup2(0xffffffffffffffff, r0) [ 690.601124][T22605] loop4: rw=2049, want=81, limit=63 [ 690.606880][T22605] attempt to access beyond end of device [ 690.612670][T22605] loop4: rw=2049, want=130, limit=63 [ 690.618065][T22605] attempt to access beyond end of device [ 690.623759][T22605] loop4: rw=2049, want=131, limit=63 [ 690.629216][T22605] attempt to access beyond end of device [ 690.634881][T22605] loop4: rw=2049, want=132, limit=63 [ 690.640301][T22605] attempt to access beyond end of device [ 690.646657][ T27] audit: type=1804 audit(1581788980.364:279): pid=22616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir445080384/syzkaller.TqRKLx/797/bus" dev="sda1" ino=16945 res=1 [ 690.646923][T22605] loop4: rw=2049, want=133, limit=63 [ 690.688031][T22605] attempt to access beyond end of device [ 690.699542][T22603] attempt to access beyond end of device [ 690.705238][T22603] loop2: rw=2049, want=79, limit=63 [ 690.713077][T22605] loop4: rw=2049, want=142, limit=63 [ 690.717973][T22616] attempt to access beyond end of device [ 690.718451][T22603] attempt to access beyond end of device [ 690.732149][T22605] attempt to access beyond end of device [ 690.737902][T22603] loop2: rw=2049, want=80, limit=63 17:49:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 690.752144][T22605] loop4: rw=2049, want=143, limit=63 [ 690.757583][T22603] attempt to access beyond end of device [ 690.762474][T22616] loop5: rw=2049, want=78, limit=63 [ 690.763524][T22605] attempt to access beyond end of device [ 690.774224][T22603] loop2: rw=2049, want=81, limit=63 [ 690.780440][T22603] attempt to access beyond end of device [ 690.786144][T22603] loop2: rw=2049, want=130, limit=63 [ 690.793898][T22603] attempt to access beyond end of device [ 690.799612][T22605] loop4: rw=2049, want=144, limit=63 [ 690.804949][T22603] loop2: rw=2049, want=131, limit=63 [ 690.810450][T22616] attempt to access beyond end of device [ 690.818861][T22616] loop5: rw=2049, want=79, limit=63 [ 690.824183][T22605] attempt to access beyond end of device [ 690.831826][T22603] attempt to access beyond end of device 17:49:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 690.852581][T22603] loop2: rw=2049, want=132, limit=63 [ 690.857920][T22605] loop4: rw=2049, want=145, limit=63 [ 690.863318][T22603] attempt to access beyond end of device [ 690.871710][T22616] attempt to access beyond end of device [ 690.877413][T22605] attempt to access beyond end of device 17:49:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) dup2(0xffffffffffffffff, r0) [ 690.915469][T22603] loop2: rw=2049, want=133, limit=63 [ 690.920861][T22616] loop5: rw=2049, want=80, limit=63 [ 690.931842][T22605] loop4: rw=2049, want=153, limit=63 [ 690.937726][T22612] attempt to access beyond end of device [ 690.944272][T22603] attempt to access beyond end of device [ 690.946795][T22616] attempt to access beyond end of device [ 690.958267][T22612] loop4: rw=2049, want=78, limit=63 [ 690.969630][T22616] loop5: rw=2049, want=81, limit=63 [ 690.988207][T22603] loop2: rw=2049, want=142, limit=63 [ 690.998123][T22616] attempt to access beyond end of device [ 691.006427][T22612] attempt to access beyond end of device [ 691.019053][T22603] attempt to access beyond end of device [ 691.026726][T22603] loop2: rw=2049, want=143, limit=63 [ 691.032153][T22616] loop5: rw=2049, want=130, limit=63 [ 691.053068][T22603] attempt to access beyond end of device [ 691.059874][T22612] loop4: rw=2049, want=79, limit=63 17:49:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 691.061600][T22616] attempt to access beyond end of device [ 691.065263][T22612] attempt to access beyond end of device [ 691.077796][T22603] loop2: rw=2049, want=144, limit=63 [ 691.078745][T22616] loop5: rw=2049, want=131, limit=63 [ 691.085744][T22603] attempt to access beyond end of device [ 691.094877][T22616] attempt to access beyond end of device [ 691.098572][T22612] loop4: rw=2049, want=80, limit=63 [ 691.105304][T22616] loop5: rw=2049, want=132, limit=63 [ 691.106245][T22612] attempt to access beyond end of device [ 691.115000][T22616] attempt to access beyond end of device [ 691.131256][T22612] loop4: rw=2049, want=81, limit=63 [ 691.148656][T22603] loop2: rw=2049, want=145, limit=63 [ 691.172366][T22603] attempt to access beyond end of device [ 691.180626][T22612] attempt to access beyond end of device [ 691.182459][T22616] loop5: rw=2049, want=133, limit=63 [ 691.217341][T22603] loop2: rw=2049, want=153, limit=63 [ 691.222763][T22612] loop4: rw=2049, want=130, limit=63 [ 691.248696][T22612] attempt to access beyond end of device [ 691.254425][T22616] attempt to access beyond end of device [ 691.272352][T22616] loop5: rw=2049, want=142, limit=63 [ 691.285928][T22612] loop4: rw=2049, want=131, limit=63 [ 691.306570][T22616] attempt to access beyond end of device [ 691.312734][T22612] attempt to access beyond end of device [ 691.315595][T22616] loop5: rw=2049, want=143, limit=63 [ 691.335610][T22616] attempt to access beyond end of device [ 691.341256][T22612] loop4: rw=2049, want=132, limit=63 [ 691.341278][T22612] attempt to access beyond end of device [ 691.341289][T22612] loop4: rw=2049, want=133, limit=63 [ 691.341303][T22612] attempt to access beyond end of device 17:49:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:49:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) dup2(0xffffffffffffffff, r0) 17:49:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 691.384174][T22612] loop4: rw=2049, want=142, limit=63 [ 691.387906][T22616] loop5: rw=2049, want=144, limit=63 [ 691.399006][T22612] attempt to access beyond end of device [ 691.403636][T22616] attempt to access beyond end of device [ 691.404691][T22612] loop4: rw=2049, want=143, limit=63 [ 691.417454][T22612] attempt to access beyond end of device [ 691.423534][T22612] loop4: rw=2049, want=144, limit=63 [ 691.429042][T22612] attempt to access beyond end of device [ 691.434722][T22612] loop4: rw=2049, want=145, limit=63 [ 691.442280][T22616] loop5: rw=2049, want=145, limit=63 [ 691.458610][T22612] attempt to access beyond end of device [ 691.459864][T22616] attempt to access beyond end of device [ 691.464389][T22612] loop4: rw=2049, want=153, limit=63 [ 691.507361][T22616] loop5: rw=2049, want=153, limit=63 [ 691.536848][T22624] attempt to access beyond end of device [ 691.545648][T22624] loop5: rw=2049, want=78, limit=63 [ 691.565396][T22624] attempt to access beyond end of device [ 691.572015][T22624] loop5: rw=2049, want=79, limit=63 [ 691.577308][T22624] attempt to access beyond end of device [ 691.584821][T22624] loop5: rw=2049, want=80, limit=63 [ 691.590128][T22624] attempt to access beyond end of device [ 691.596014][T22624] loop5: rw=2049, want=81, limit=63 [ 691.601337][T22624] attempt to access beyond end of device [ 691.607000][T22624] loop5: rw=2049, want=130, limit=63 [ 691.625450][T22624] attempt to access beyond end of device [ 691.631480][T22624] loop5: rw=2049, want=131, limit=63 [ 691.636865][T22624] attempt to access beyond end of device [ 691.645372][T22624] loop5: rw=2049, want=132, limit=63 [ 691.672425][T22624] attempt to access beyond end of device [ 691.682683][T22624] loop5: rw=2049, want=133, limit=63 [ 691.688034][T22624] attempt to access beyond end of device [ 691.696810][T22624] loop5: rw=2049, want=142, limit=63 [ 691.702345][T22624] attempt to access beyond end of device [ 691.708020][T22624] loop5: rw=2049, want=143, limit=63 [ 691.716476][T22624] attempt to access beyond end of device [ 691.722442][T22624] loop5: rw=2049, want=144, limit=63 [ 691.738610][T22624] attempt to access beyond end of device [ 691.744257][T22624] loop5: rw=2049, want=145, limit=63 17:49:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) dup2(0xffffffffffffffff, r0) 17:49:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 692.005092][ T27] audit: type=1804 audit(1581788981.804:280): pid=22667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir298578491/syzkaller.o7mZ3n/1077/bus" dev="sda1" ino=16752 res=1 17:49:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) [ 692.103407][T22667] attempt to access beyond end of device [ 692.123409][T22667] loop4: rw=2049, want=78, limit=63 [ 692.191573][T22667] attempt to access beyond end of device [ 692.206072][T22667] loop4: rw=2049, want=79, limit=63 [ 692.240328][T22667] attempt to access beyond end of device [ 692.264563][T22667] loop4: rw=2049, want=80, limit=63 [ 692.287479][T22667] attempt to access beyond end of device [ 692.299296][T22667] loop4: rw=2049, want=81, limit=63 [ 692.351273][T22667] attempt to access beyond end of device [ 692.356935][T22667] loop4: rw=2049, want=130, limit=63 [ 692.394246][T22694] attempt to access beyond end of device [ 692.400034][T22694] loop2: rw=2049, want=78, limit=63 [ 692.405304][T22694] attempt to access beyond end of device [ 692.417836][T22667] attempt to access beyond end of device [ 692.431454][T22667] loop4: rw=2049, want=131, limit=63 [ 692.447777][T22667] attempt to access beyond end of device [ 692.462705][T22694] loop2: rw=2049, want=79, limit=63 [ 692.475102][T22694] attempt to access beyond end of device [ 692.478570][T22667] loop4: rw=2049, want=132, limit=63 [ 692.486618][T22667] attempt to access beyond end of device [ 692.492376][T22694] loop2: rw=2049, want=80, limit=63 [ 692.497852][T22667] loop4: rw=2049, want=133, limit=63 [ 692.503230][T22694] attempt to access beyond end of device [ 692.509037][T22667] attempt to access beyond end of device [ 692.514729][T22667] loop4: rw=2049, want=142, limit=63 [ 692.520096][T22694] loop2: rw=2049, want=81, limit=63 [ 692.525572][T22667] attempt to access beyond end of device [ 692.525966][T22701] attempt to access beyond end of device [ 692.531498][T22667] loop4: rw=2049, want=143, limit=63 [ 692.538376][T22701] loop2: rw=2049, want=78, limit=63 17:49:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x2c, 0x0, "b2b099d862fdeb88e6ca26da7996764cd49f2ea04eef0b3e8dcd61ec29c74e68c32bc680c2b01f984b37298d0f6b162f58d5a3397c46d5c784c2f6283fdcf84ac2772c2b03d511979c7e3c4aae4d408a"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 692.544817][T22667] attempt to access beyond end of device [ 692.554344][T22667] loop4: rw=2049, want=144, limit=63 [ 692.559480][T22701] attempt to access beyond end of device [ 692.565415][T22701] loop2: rw=2049, want=79, limit=63 [ 692.568850][T22667] attempt to access beyond end of device [ 692.570998][T22701] attempt to access beyond end of device [ 692.588597][T22701] loop2: rw=2049, want=80, limit=63 [ 692.593952][T22701] attempt to access beyond end of device [ 692.599844][T22701] loop2: rw=2049, want=81, limit=63 [ 692.605474][T22667] loop4: rw=2049, want=145, limit=63 [ 692.644431][T22667] attempt to access beyond end of device [ 692.668214][T22667] loop4: rw=2049, want=153, limit=63 [ 692.696272][T22686] attempt to access beyond end of device [ 692.730799][T22686] loop4: rw=2049, want=78, limit=63 [ 692.774349][T22686] attempt to access beyond end of device [ 692.791131][T22686] loop4: rw=2049, want=79, limit=63 [ 692.817800][T22686] attempt to access beyond end of device [ 692.824659][T22686] loop4: rw=2049, want=80, limit=63 [ 692.830244][T22686] attempt to access beyond end of device [ 692.835880][T22686] loop4: rw=2049, want=81, limit=63 [ 692.889802][T22711] attempt to access beyond end of device [ 692.895499][T22711] loop5: rw=2049, want=78, limit=63 [ 692.901989][T22711] attempt to access beyond end of device [ 692.907715][T22711] loop5: rw=2049, want=79, limit=63 [ 692.913095][T22711] attempt to access beyond end of device [ 692.918784][T22711] loop5: rw=2049, want=80, limit=63 [ 692.924174][T22711] attempt to access beyond end of device [ 692.929888][T22711] loop5: rw=2049, want=81, limit=63 17:49:42 executing program 4 (fault-call:10 fault-nth:0): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:49:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:42 executing program 2 (fault-call:12 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) [ 692.988660][T22711] attempt to access beyond end of device [ 693.012395][T22711] loop5: rw=2049, want=78, limit=63 [ 693.017691][T22711] attempt to access beyond end of device [ 693.026974][T22711] loop5: rw=2049, want=79, limit=63 [ 693.032720][T22711] attempt to access beyond end of device 17:49:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 693.038444][T22711] loop5: rw=2049, want=80, limit=63 [ 693.046697][T22711] attempt to access beyond end of device [ 693.064976][T22711] loop5: rw=2049, want=81, limit=63 17:49:43 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:49:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r0 = socket(0x10, 0x800000000080002, 0x0) dup2(r0, 0xffffffffffffffff) [ 693.222088][T22731] FAULT_INJECTION: forcing a failure. [ 693.222088][T22731] name failslab, interval 1, probability 0, space 0, times 1 [ 693.343329][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 693.343352][ T27] audit: type=1804 audit(1581788983.144:287): pid=22724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir315294111/syzkaller.fO3c42/968/bus" dev="sda1" ino=16812 res=1 [ 693.393192][T22731] CPU: 1 PID: 22731 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 693.401880][T22731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.411930][T22731] Call Trace: [ 693.415311][T22731] dump_stack+0x11d/0x181 [ 693.419656][T22731] should_fail.cold+0x5/0x13 [ 693.424341][T22731] __should_failslab+0x86/0xb0 [ 693.429197][T22731] should_failslab+0x9/0x14 [ 693.433709][T22731] kmem_cache_alloc+0x29/0x5d0 [ 693.438557][T22731] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 693.444802][T22731] ? _copy_from_user+0x9c/0x110 [ 693.449668][T22731] io_submit_one+0xd0/0xdb0 [ 693.454416][T22731] ? __rcu_read_unlock+0x77/0x3a0 [ 693.459459][T22731] ? lookup_ioctx+0xd4/0x260 [ 693.464144][T22731] __x64_sys_io_submit+0x104/0x2a0 [ 693.469288][T22731] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 693.475616][T22731] ? debug_smp_processor_id+0x43/0x137 [ 693.481106][T22731] do_syscall_64+0xcc/0x3a0 [ 693.485627][T22731] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 693.491537][T22731] RIP: 0033:0x45c6c9 [ 693.495441][T22731] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 693.515052][T22731] RSP: 002b:00007fd7599bdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 693.523522][T22731] RAX: ffffffffffffffda RBX: 00007fd7599be6d4 RCX: 000000000045c6c9 [ 693.531498][T22731] RDX: 0000000020000540 RSI: 0000000000000001 RDI: 00007fd759998000 17:49:43 executing program 5 (fault-call:9 fault-nth:0): r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r0 = socket(0x10, 0x800000000080002, 0x0) dup2(r0, 0xffffffffffffffff) [ 693.539552][T22731] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 693.547533][T22731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 693.555525][T22731] R13: 00000000000001f4 R14: 00000000004c4068 R15: 0000000000000000 17:49:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r0 = socket(0x10, 0x800000000080002, 0x0) dup2(r0, 0xffffffffffffffff) 17:49:43 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:43 executing program 2 (fault-call:12 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x20) 17:49:43 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x21) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x8, &(0x7f00000001c0)='overlay\x00', r2}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000440)="ab92a010df85e104e2979d18ffeae96945aa5ca4b3624e451f7e70e9693fece61d140ccae586fc044b8af2076ea5cb53da968ad56c58513ecee502c1fd136f4fcf726e146baff0a1f007ff5c9835bf67028e36d865e2a7dc7acc28a8ad77a353b75d84cfddae4dd8ddaa0870c100db61743fc6a9dbebd54604f1fa1899e9e876d6c1c5b9617ffdd941340764aa9063d53f5762d3a2d49c8f3c79b0055acab88f14b1d7eb73702bac26fda6ccaab1993a5793f853f999232d9e5936d0c150f75048b01a944978adae9b37cbe91175f3646c6d8abbc5fcb852", &(0x7f0000000080)="60fe106d37959e6c5a71051a6f11e30e33a86b2d65848fa571be4d639465667ada99c0e22329ba4b1a0b3117de325ef1ab369089b9d2ebc9e24a97584a9deb7572cd6c183a24b58e9bea621afc4ad41ab83162f7257bcb71fc40fcf2533f28417607b119c3f00f98278fbac2df14ee0b8599b6018da28755c3e5bf73a290518a73cde7e5eaf6369314d3159f", 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r7) 17:49:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 693.833105][T22762] FAULT_INJECTION: forcing a failure. [ 693.833105][T22762] name failslab, interval 1, probability 0, space 0, times 0 [ 693.862950][T22762] CPU: 0 PID: 22762 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 693.871751][T22762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.881869][T22762] Call Trace: [ 693.885217][T22762] dump_stack+0x11d/0x181 [ 693.889586][T22762] should_fail.cold+0x5/0x13 [ 693.894170][T22762] __should_failslab+0x86/0xb0 [ 693.898918][T22762] should_failslab+0x9/0x14 [ 693.903410][T22762] __kmalloc_track_caller+0x4f/0x690 [ 693.908694][T22762] ? __fget_light+0xc4/0x1a0 [ 693.913318][T22762] ? __do_sys_bpf+0x211e/0x2da0 [ 693.918173][T22762] memdup_user+0x2f/0xc0 [ 693.922402][T22762] __do_sys_bpf+0x211e/0x2da0 [ 693.927111][T22762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.933402][T22762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.939673][T22762] ? __sb_end_write+0xbe/0x100 [ 693.944481][T22762] __x64_sys_bpf+0x4c/0x60 [ 693.948985][T22762] do_syscall_64+0xcc/0x3a0 [ 693.953498][T22762] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 693.959419][T22762] RIP: 0033:0x45c6c9 [ 693.963460][T22762] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 693.983048][T22762] RSP: 002b:00007f2d826a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.991444][T22762] RAX: ffffffffffffffda RBX: 00007f2d826a16d4 RCX: 000000000045c6c9 [ 693.999442][T22762] RDX: 0000000000000020 RSI: 00000000200001c0 RDI: 0000000000000004 [ 694.007428][T22762] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 694.015473][T22762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 694.023472][T22762] R13: 000000000000005e R14: 00000000004c2e86 R15: 0000000000000000 17:49:44 executing program 5 (fault-call:9 fault-nth:1): r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 694.182903][T22773] FAULT_INJECTION: forcing a failure. [ 694.182903][T22773] name failslab, interval 1, probability 0, space 0, times 0 [ 694.272133][T22773] CPU: 1 PID: 22773 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 694.281190][T22773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.291297][T22773] Call Trace: [ 694.294606][T22773] dump_stack+0x11d/0x181 [ 694.298986][T22773] should_fail.cold+0x5/0x13 [ 694.303675][T22773] __should_failslab+0x86/0xb0 [ 694.305110][T22769] overlayfs: failed to resolve './bus': -2 [ 694.308543][T22773] should_failslab+0x9/0x14 [ 694.308564][T22773] __kmalloc+0x53/0x690 [ 694.308600][T22773] ? tomoyo_realpath_from_path+0x83/0x3c0 [ 694.328741][T22773] tomoyo_realpath_from_path+0x83/0x3c0 [ 694.334301][T22773] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 694.339695][T22773] tomoyo_path_number_perm+0x10a/0x3c0 [ 694.345189][T22773] ? __fget_files+0x9f/0x1b0 [ 694.349801][T22773] tomoyo_file_ioctl+0x2c/0x40 [ 694.354601][T22773] security_file_ioctl+0x6d/0xa0 [ 694.359557][T22773] ksys_ioctl+0x5f/0x150 [ 694.363863][T22773] __x64_sys_ioctl+0x4c/0x60 [ 694.368542][T22773] do_syscall_64+0xcc/0x3a0 [ 694.373063][T22773] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 694.378955][T22773] RIP: 0033:0x45c6c9 [ 694.382863][T22773] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 694.402464][T22773] RSP: 002b:00007ff7f4d00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:49:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 694.408633][ T27] audit: type=1804 audit(1581788984.194:288): pid=22786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1079/bus" dev="sda1" ino=16609 res=1 [ 694.410877][T22773] RAX: ffffffffffffffda RBX: 00007ff7f4d016d4 RCX: 000000000045c6c9 [ 694.410899][T22773] RDX: 0000000020000100 RSI: 00000000c0205648 RDI: 0000000000000003 [ 694.451386][T22773] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 694.459381][T22773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 17:49:44 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 694.467361][T22773] R13: 000000000000064c R14: 00000000004c9016 R15: 0000000000000000 [ 694.477215][T22773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 694.522042][T22792] FAULT_INJECTION: forcing a failure. [ 694.522042][T22792] name failslab, interval 1, probability 0, space 0, times 0 [ 694.561587][T22786] FAULT_INJECTION: forcing a failure. 17:49:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 694.561587][T22786] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 694.646629][T22792] CPU: 0 PID: 22792 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0 [ 694.655340][T22792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.665418][T22792] Call Trace: [ 694.668760][T22792] dump_stack+0x11d/0x181 [ 694.673130][T22792] should_fail.cold+0x5/0x13 [ 694.677745][T22792] __should_failslab+0x86/0xb0 [ 694.682515][T22792] should_failslab+0x9/0x14 [ 694.687034][T22792] __kmalloc+0x53/0x690 [ 694.691207][T22792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 694.697463][T22792] ? _copy_from_user+0x9c/0x110 [ 694.702425][T22792] ? __do_sys_bpf+0x2164/0x2da0 [ 694.707340][T22792] __do_sys_bpf+0x2164/0x2da0 [ 694.712031][T22792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.718296][T22792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.724642][T22792] ? __sb_end_write+0xbe/0x100 [ 694.729428][T22792] __x64_sys_bpf+0x4c/0x60 [ 694.733857][T22792] do_syscall_64+0xcc/0x3a0 [ 694.738363][T22792] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 694.744289][T22792] RIP: 0033:0x45c6c9 [ 694.748197][T22792] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 694.768035][T22792] RSP: 002b:00007f2d826a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 694.776484][T22792] RAX: ffffffffffffffda RBX: 00007f2d826a16d4 RCX: 000000000045c6c9 [ 694.784453][T22792] RDX: 0000000000000020 RSI: 00000000200001c0 RDI: 0000000000000004 17:49:44 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 694.792446][T22792] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 694.800421][T22792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 694.808388][T22792] R13: 000000000000005e R14: 00000000004c2e86 R15: 0000000000000001 [ 694.816398][T22786] CPU: 1 PID: 22786 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 694.819673][ T27] audit: type=1804 audit(1581788984.244:289): pid=22787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir735327012/syzkaller.PYAtov/982/bus" dev="sda1" ino=16821 res=1 [ 694.825089][T22786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.859831][T22786] Call Trace: [ 694.863132][T22786] dump_stack+0x11d/0x181 [ 694.866409][T22806] FAULT_INJECTION: forcing a failure. [ 694.866409][T22806] name failslab, interval 1, probability 0, space 0, times 0 [ 694.867492][T22786] should_fail.cold+0x5/0x13 [ 694.867522][T22786] should_fail_alloc_page+0x50/0x60 [ 694.889929][T22786] __alloc_pages_nodemask+0xd2/0x310 17:49:44 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) recvmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/23, 0x17}], 0x1, &(0x7f0000000340)=""/176, 0xb0}, 0x2000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./filefile0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x6800, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f00000000c0)=0x1) close(r3) [ 694.895290][T22786] alloc_pages_current+0xd1/0x170 [ 694.900347][T22786] __page_cache_alloc+0x183/0x1a0 [ 694.905385][T22786] pagecache_get_page+0x24b/0x6f0 [ 694.910501][T22786] grab_cache_page_write_begin+0x5d/0x90 [ 694.916158][T22786] ext4_da_write_begin+0x1a3/0x840 [ 694.921277][T22786] ? generic_update_time+0x189/0x270 [ 694.926580][T22786] ? iov_iter_fault_in_readable+0x15c/0x2b0 [ 694.932487][T22786] generic_perform_write+0x136/0x320 [ 694.937867][T22786] ext4_buffered_write_iter+0x143/0x290 [ 694.943526][T22786] ext4_file_write_iter+0xfa/0xd70 [ 694.948669][T22786] ? apparmor_file_permission+0x38/0x50 [ 694.954240][T22786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.960490][T22786] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 694.966399][T22786] ? __read_once_size+0x5a/0xe0 [ 694.971276][T22786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.977531][T22786] aio_write+0x1de/0x2d0 [ 694.981862][T22786] ? __fget_files+0x9f/0x1b0 [ 694.986523][T22786] io_submit_one+0x61d/0xdb0 [ 694.991141][T22786] __x64_sys_io_submit+0x104/0x2a0 [ 694.996278][T22786] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 695.002525][T22786] ? debug_smp_processor_id+0x43/0x137 [ 695.007990][T22786] do_syscall_64+0xcc/0x3a0 [ 695.012524][T22786] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 695.018540][T22786] RIP: 0033:0x45c6c9 [ 695.022503][T22786] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 695.042212][T22786] RSP: 002b:00007fd7599bdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 695.050649][T22786] RAX: ffffffffffffffda RBX: 00007fd7599be6d4 RCX: 000000000045c6c9 [ 695.058719][T22786] RDX: 0000000020000540 RSI: 0000000000000001 RDI: 00007fd759998000 [ 695.066788][T22786] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 695.074833][T22786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 695.082811][T22786] R13: 00000000000001f4 R14: 00000000004c4068 R15: 0000000000000001 [ 695.093995][T22806] CPU: 0 PID: 22806 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 695.096415][T22811] overlayfs: option "workdir=./filefile0" is useless in a non-upper mount, ignore [ 695.102795][T22806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.102800][T22806] Call Trace: [ 695.102827][T22806] dump_stack+0x11d/0x181 [ 695.102862][T22806] should_fail.cold+0x5/0x13 [ 695.112211][T22811] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 695.122185][T22806] __should_failslab+0x86/0xb0 [ 695.122211][T22806] should_failslab+0x9/0x14 [ 695.151914][T22806] __kmalloc+0x53/0x690 [ 695.156117][T22806] ? tomoyo_encode2.part.0+0xd9/0x260 [ 695.161503][T22806] tomoyo_encode2.part.0+0xd9/0x260 [ 695.166714][T22806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.167184][T22812] overlayfs: option "workdir=./filefile0" is useless in a non-upper mount, ignore [ 695.172966][T22806] tomoyo_encode+0x34/0x50 [ 695.172986][T22806] tomoyo_realpath_from_path+0x11a/0x3c0 [ 695.173056][T22806] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 695.182263][T22812] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 695.186607][T22806] tomoyo_path_number_perm+0x10a/0x3c0 [ 695.186653][T22806] ? __fget_files+0x9f/0x1b0 [ 695.215860][T22806] tomoyo_file_ioctl+0x2c/0x40 [ 695.220693][T22806] security_file_ioctl+0x6d/0xa0 [ 695.225644][T22806] ksys_ioctl+0x5f/0x150 [ 695.229905][T22806] __x64_sys_ioctl+0x4c/0x60 [ 695.234561][T22806] do_syscall_64+0xcc/0x3a0 [ 695.239079][T22806] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 695.244990][T22806] RIP: 0033:0x45c6c9 [ 695.248934][T22806] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 695.268541][T22806] RSP: 002b:00007ff7f4d00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.277013][T22806] RAX: ffffffffffffffda RBX: 00007ff7f4d016d4 RCX: 000000000045c6c9 [ 695.284992][T22806] RDX: 0000000020000100 RSI: 00000000c0205648 RDI: 0000000000000003 17:49:45 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:45 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 695.292971][T22806] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 695.300946][T22806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 695.308942][T22806] R13: 000000000000064c R14: 00000000004c9016 R15: 0000000000000001 [ 695.358178][T22806] ERROR: Out of memory at tomoyo_realpath_from_path. 17:49:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:45 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1}) r4 = getpgrp(r2) r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1}) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x14, 0x1, 0x7fffffff, 0x6, 0x2, 0x5, 0x20000, 0xffffffff}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r6) 17:49:45 executing program 1 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:45 executing program 5 (fault-call:9 fault-nth:2): r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:45 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 695.590395][T22830] FAULT_INJECTION: forcing a failure. [ 695.590395][T22830] name failslab, interval 1, probability 0, space 0, times 0 [ 695.636573][T22836] overlayfs: failed to resolve './file0': -2 [ 695.666611][T22830] CPU: 0 PID: 22830 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 695.675312][T22830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.685367][T22830] Call Trace: [ 695.688787][T22830] dump_stack+0x11d/0x181 [ 695.693128][T22830] should_fail.cold+0x5/0x13 [ 695.697732][T22830] __should_failslab+0x86/0xb0 [ 695.702508][T22830] should_failslab+0x9/0x14 [ 695.707024][T22830] kmem_cache_alloc_node_trace+0x3b/0x670 [ 695.712839][T22830] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 695.718580][T22830] ? video_get_user+0x15f/0x500 [ 695.723453][T22830] __kmalloc_node+0x38/0x50 [ 695.727991][T22830] kvmalloc_node+0x71/0x100 [ 695.732538][T22830] video_usercopy+0x386/0x9b0 [ 695.737337][T22830] ? v4l_s_fmt+0x7c0/0x7c0 [ 695.741782][T22830] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 695.747689][T22830] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 695.753944][T22830] video_ioctl2+0x36/0x49 [ 695.758346][T22830] v4l2_ioctl+0xe1/0x110 [ 695.762609][T22830] ? v4l2_mmap+0x130/0x130 [ 695.767038][T22830] ksys_ioctl+0x109/0x150 [ 695.771496][T22830] __x64_sys_ioctl+0x4c/0x60 [ 695.776096][T22830] do_syscall_64+0xcc/0x3a0 [ 695.780640][T22830] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 695.786653][T22830] RIP: 0033:0x45c6c9 [ 695.790559][T22830] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 695.810165][T22830] RSP: 002b:00007ff7f4d00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.818613][T22830] RAX: ffffffffffffffda RBX: 00007ff7f4d016d4 RCX: 000000000045c6c9 [ 695.826588][T22830] RDX: 0000000020000100 RSI: 00000000c0205648 RDI: 0000000000000003 17:49:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 695.834651][T22830] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 695.842624][T22830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 695.850595][T22830] R13: 000000000000064c R14: 00000000004c9016 R15: 0000000000000002 [ 695.858823][ T27] audit: type=1804 audit(1581788985.464:290): pid=22840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1080/bus" dev="sda1" ino=16825 res=1 17:49:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 695.910271][T22840] attempt to access beyond end of device [ 695.916011][T22840] loop2: rw=2049, want=78, limit=63 [ 695.938619][T22840] buffer_io_error: 182 callbacks suppressed [ 695.938633][T22840] Buffer I/O error on dev loop2, logical block 77, lost async page write 17:49:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:45 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:45 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdiile0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x7, 0x30364d54, 0x2, @discrete={0x80, 0x1ff}}) close(r2) [ 695.996063][T22840] attempt to access beyond end of device [ 696.028267][T22840] loop2: rw=2049, want=79, limit=63 [ 696.098856][T22840] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 696.173146][T22840] attempt to access beyond end of device [ 696.207921][T22840] loop2: rw=2049, want=80, limit=63 [ 696.238599][T22840] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 696.292838][T22865] overlayfs: unrecognized mount option "upperdiile0" or missing value [ 696.308769][T22840] attempt to access beyond end of device [ 696.331555][T22870] overlayfs: unrecognized mount option "upperdiile0" or missing value [ 696.333077][T22840] loop2: rw=2049, want=81, limit=63 [ 696.373534][T22840] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 696.382175][T22840] attempt to access beyond end of device [ 696.388433][T22840] loop2: rw=2049, want=130, limit=63 [ 696.421022][T22840] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 696.433122][T22840] attempt to access beyond end of device [ 696.441519][T22840] loop2: rw=2049, want=131, limit=63 [ 696.446819][T22840] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 696.455366][T22840] attempt to access beyond end of device [ 696.461072][T22840] loop2: rw=2049, want=132, limit=63 [ 696.466385][T22840] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 696.475071][T22840] attempt to access beyond end of device [ 696.480805][T22840] loop2: rw=2049, want=133, limit=63 [ 696.486076][T22840] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 696.494732][T22840] attempt to access beyond end of device [ 696.500387][T22840] loop2: rw=2049, want=142, limit=63 [ 696.505678][T22840] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 696.514215][T22840] attempt to access beyond end of device [ 696.519867][T22840] loop2: rw=2049, want=143, limit=63 [ 696.525138][T22840] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 696.533657][T22840] attempt to access beyond end of device [ 696.540296][T22840] loop2: rw=2049, want=144, limit=63 [ 696.545625][T22840] attempt to access beyond end of device [ 696.551312][T22840] loop2: rw=2049, want=145, limit=63 [ 696.556749][T22840] attempt to access beyond end of device [ 696.562422][T22840] loop2: rw=2049, want=153, limit=63 [ 696.568134][T22852] attempt to access beyond end of device [ 696.573810][T22852] loop2: rw=2049, want=78, limit=63 [ 696.579044][T22852] attempt to access beyond end of device [ 696.584681][T22852] loop2: rw=2049, want=79, limit=63 [ 696.590005][T22852] attempt to access beyond end of device [ 696.595637][T22852] loop2: rw=2049, want=80, limit=63 [ 696.600998][T22852] attempt to access beyond end of device [ 696.606624][T22852] loop2: rw=2049, want=81, limit=63 17:49:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9e0000, 0x4, 0xffff, r0, 0x0, &(0x7f0000000040)={0x9a0904, 0x1, [], @p_u32=&(0x7f0000000000)=0x1f}}) accept4$alg(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r2 = accept$netrom(r1, 0x0, &(0x7f00000000c0)) fcntl$getown(r2, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r0) 17:49:46 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:46 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:46 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f000000d180), 0x4000000000000eb, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f000000d180), 0x4000000000000eb, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'veth0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f000000d180), 0x4000000000000eb, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f000000d180), 0x4000000000000eb, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r4, @ANYRES32, @ANYPTR, @ANYBLOB="209f3471107eb08915d1720231e0d9deb83d176170bf69c1b41271ae043d5615337573a027e6ceff9b6b7427b6b49ecfdf3c2a44011b6fcd9f18d8cd5804227d25dd411994515711b750bb1b9edd1ee9a1a05d693316ab33484fedc4c4fe9e5154af32bf38035a92f6", @ANYPTR64, @ANYRES32=r5, @ANYRES16], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64, @ANYRESOCT=r6, @ANYRESHEX, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESDEC], @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES64=r9]]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r10) 17:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000280)=""/14, &(0x7f00000002c0)=0xe) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r4 = socket(0x10, 0x800000000080002, 0x0) dup2(r4, r1) 17:49:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 696.879496][T22881] overlayfs: unrecognized mount option "À" or missing value [ 697.011101][ T27] audit: type=1804 audit(1581788986.814:291): pid=22889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1081/bus" dev="sda1" ino=16546 res=1 17:49:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 697.054572][T22900] overlayfs: unrecognized mount option "À" or missing value [ 697.079447][T22889] attempt to access beyond end of device 17:49:46 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 697.139342][T22889] loop2: rw=2049, want=78, limit=63 [ 697.145506][T22889] attempt to access beyond end of device [ 697.158125][T22889] loop2: rw=2049, want=79, limit=63 17:49:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x8, 0x4980) sendmsg$can_j1939(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)="797fa00da24ea40a367c95ff17df1a202d97781c49ecd3b453820791d957d7c095f010d5f2e15beb5c153c7b771927d9bbb17950571d810cdd24724a6a11510c45dc9e66506f0ff3751a81c5907ad27840a19aa936ac7e40573c33277c231bc5eaa2c816bf1f5d1598c2b261924bd9497c251eb50983418f579d104cff9a36154878dca67db51adf5b58e31dc75291eb7605913082f20e32662d5fc9800155ae8373020564319df18445dd18", 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x50) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56c0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1096}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x40014) r4 = socket(0x10, 0x800000000080002, 0x0) dup2(r4, r0) [ 697.179694][T22889] attempt to access beyond end of device [ 697.193412][T22889] loop2: rw=2049, want=80, limit=63 [ 697.258591][T22889] attempt to access beyond end of device [ 697.292485][T22889] loop2: rw=2049, want=81, limit=63 [ 697.309058][T22889] attempt to access beyond end of device [ 697.340507][T22889] loop2: rw=2049, want=130, limit=63 [ 697.352500][T22889] attempt to access beyond end of device [ 697.386253][T22889] loop2: rw=2049, want=131, limit=63 [ 697.398370][T22889] attempt to access beyond end of device [ 697.404745][T22889] loop2: rw=2049, want=132, limit=63 [ 697.410434][T22889] attempt to access beyond end of device [ 697.416191][T22889] loop2: rw=2049, want=133, limit=63 [ 697.423430][T22889] attempt to access beyond end of device [ 697.431741][T22889] loop2: rw=2049, want=142, limit=63 [ 697.437151][T22889] attempt to access beyond end of device [ 697.497345][T22889] loop2: rw=2049, want=143, limit=63 [ 697.505155][T22889] attempt to access beyond end of device [ 697.511241][T22889] loop2: rw=2049, want=144, limit=63 [ 697.516569][T22889] attempt to access beyond end of device [ 697.522551][T22889] loop2: rw=2049, want=145, limit=63 [ 697.527915][T22889] attempt to access beyond end of device [ 697.540831][T22889] loop2: rw=2049, want=153, limit=63 [ 697.553192][T22908] attempt to access beyond end of device [ 697.566860][T22908] loop2: rw=2049, want=78, limit=63 [ 697.578336][T22908] attempt to access beyond end of device [ 697.594565][T22908] loop2: rw=2049, want=79, limit=63 [ 697.599956][T22908] attempt to access beyond end of device [ 697.605759][T22908] loop2: rw=2049, want=80, limit=63 [ 697.611370][T22908] attempt to access beyond end of device [ 697.617066][T22908] loop2: rw=2049, want=81, limit=63 [ 697.636146][ T27] audit: type=1804 audit(1581788987.434:292): pid=22889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1081/file0/bus" dev="loop2" ino=187 res=1 [ 697.668382][T22908] attempt to access beyond end of device [ 697.674964][T22908] loop2: rw=2049, want=245, limit=63 [ 697.680346][ T27] audit: type=1804 audit(1581788987.464:293): pid=22889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1081/file0/bus" dev="loop2" ino=187 res=1 [ 697.681057][T22908] attempt to access beyond end of device [ 697.704986][ T27] audit: type=1804 audit(1581788987.464:294): pid=22908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1081/file0/bus" dev="loop2" ino=187 res=1 [ 697.713148][T22908] loop2: rw=2049, want=245, limit=63 17:49:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:47 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x10, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002a40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002b80)={0x34, r3, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r5, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @rand_addr, 0x0}, &(0x7f0000001580)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001700)={{{@in=@empty, @in=@broadcast, 0x3894, 0xffff, 0x4e21, 0x0, 0x8, 0x0, 0x80, 0x2f, r6}, {0x2b7b, 0xffffffffffffffff, 0xe9, 0x5, 0x8, 0x800, 0x8000, 0x3}, {0xfffffffffffffffb, 0x6, 0x9, 0x7}, 0x7ff, 0x6e6bba, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0x2, @in6=@mcast2, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x7, 0x9}}, 0xe8) r7 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r7, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @rand_addr, 0x0}, &(0x7f0000001580)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in=@broadcast, 0x3894, 0xffff, 0x4e21, 0x0, 0x8, 0x0, 0x80, 0x2f, r8}, {0x2b7b, 0xffffffffffffffff, 0xe9, 0x5, 0x8, 0x1, 0x8000, 0x3}, {0xfffffffffffffffb, 0x6, 0x9, 0x7}, 0x7ff, 0x6e6bba, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x33}, 0x2, @in6=@mcast2, 0x3503, 0x3, 0x2, 0x0, 0xfffffffd, 0x7, 0x9}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r11 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r11, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @rand_addr, 0x0}, &(0x7f0000001580)=0xc) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r13, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f0000000540)={[], 0x80, 0x3, 0x1, 0x7ff, 0x401, r14}) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000001700)={{{@in=@empty, @in=@broadcast, 0x3894, 0xffff, 0x4e21, 0x0, 0x8, 0x0, 0x80, 0x2f, r12}, {0x2b7b, 0xffffffffffffffff, 0xe9, 0x5, 0x8, 0x800, 0x8000, 0x3}, {0xfffffffffffffffb, 0x6, 0x9, 0x7}, 0x7ff, 0x6e6bba, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0x2, @in6=@mcast2, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x7, 0x9}}, 0xe8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="040028bd7000ffdbdf2506000000540001800800030002000000140002006970766c616e30000000000000000000080003000300000008000300030000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="080003000200000004000180180001801400020067656e657665300000000000000000002c0001801400020076657468315f766972745f77696669001400020069705f767469300000000000000000007000018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020073797a5f74756e0000000000000000000800030002000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468b15f766c616e0000000000000800030003000000140002006d6163766c616e310000000000000000640001801400020063616966300000000000000000000000657468305f746f5f7465616d0000000800010030a543dc6ff9d785d796bbdef7730d6042df4ebfcedd62a897cba0cddc96", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c657231000000000000140002006970365f767469300000000000000000"], 0x184}, 0x1, 0x0, 0x0, 0x91}, 0x8090) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r15 = socket(0x10, 0x800000000080002, 0x0) r16 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(r16, 0xc0445636, &(0x7f0000000040)={0x7fffffff, "e0b1cb2939dfe931197324330cd9d061bf0b8b19159c698b612fa3b8d576908f", 0x40, 0xfd5, 0x2, 0x8, 0x2}) dup2(r15, r0) 17:49:47 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:47 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f722b6469723d2e2f66696cad77351b707065726469723d2e2f66696c6530a7cc780aba9d44aff4763ae4841c67a898a461e00b57e0978c9f5220d22c3cd2d88f6252719103f37b01fddc3751a0e77591d4830578b611bf43c2fd40da2359230901c3f825506bcc8155ea3efb28283c5c6be510a1a7e7a9c0fadff308e5c4d08225ac8eb47bf767f7327ddcbc858a97ece90d9db72273326436c4c08c23bb9f8ebe9404515fc7025ae18361c6d5c6bbae42feffa19abcd061320dd373678df7d6cac6a81ec7eef23e65e43479752abadf7405adb6ec5d7e43b1eb9e2493d78b369a30ed074be37938f987a56a491e76fd54d3385e00cb8f87e0c5d551ee37fa07bcedac45725b106c3f495e0d56e6405f793fae6b5f7e07389086962b763bf5b1bde173244ca98a4c177a2d84fc6af14d145363a3920a72a16807bb68b6d13381a39c83be0b6fda118f6ca280006f1ab74610526f1ede1eac61a2401cdb7f54313584f8ba481a215c71a527bd04a589972b85344df71d11018cc4b9edd7a4e6768e36e03ee6cd74b732cfbc4473fb320a3e45c31d1aca9fc858fcbbc23072a3"]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0x7ff, 0x4) [ 697.901961][T22943] overlayfs: unrecognized mount option "wor+dir=./fil­w5pperdir=./file0§Ìx [ 697.901961][T22943] ºD¯ôv:ä„g¨˜¤aà Wà—ŒŸR Ò" or missing value 17:49:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:47 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x1274, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 698.030060][ T27] audit: type=1804 audit(1581788987.834:295): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1082/bus" dev="sda1" ino=16610 res=1 [ 698.078427][T22952] attempt to access beyond end of device [ 698.084401][T22952] loop2: rw=2049, want=78, limit=63 [ 698.090211][T22952] attempt to access beyond end of device [ 698.095910][T22952] loop2: rw=2049, want=79, limit=63 [ 698.101415][T22952] attempt to access beyond end of device [ 698.118388][T22952] loop2: rw=2049, want=80, limit=63 17:49:47 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x6, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 698.138798][T22952] attempt to access beyond end of device [ 698.162930][T22952] loop2: rw=2049, want=81, limit=63 [ 698.178654][T22952] attempt to access beyond end of device [ 698.184338][T22952] loop2: rw=2049, want=130, limit=63 17:49:48 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x20, 0x1, 0x147, &(0x7f0000000440)="f1e8ebc96d3c4f7ba62486f152e7e7d07ff7988aa5fec8d8faf5383d7fd47a5872c5995cc11b80df9840dc2398158247859a419980bade97f0db3b10813cc5adcc351df28c9cc8b69e5d478c089aad0f68432e01468f29ed8ee06986a264ea1a9b565a977d3e573343ae2957954822d4279af5d30baa7079389de61ab6fe1a6e1229d8c82b4330ec0af890cfd1318222259f1a29576f742fdb68f3c503a761259e7e7cd4ba23a5f41f67bfdcb35a60b3c013a4e34f61c8d8e31f74573760f59dcef2122d899b44b4ef8a53388580b15e04e15ae8e15249ddafc65eb6344e47c37f4cf36352460acf1e0d7995e807e90cfef73454ccd34f31a18dc6b91571753eeec751d7db9b527cd5bb938f003e161ce6567a65cf709b39d03e40fb0c54ecea75d05ee2b81b141162df72c64729ce284c114f960be48816d98bf005d79b25dd450f326aee91b60c3806acc53562a0f5306d97ef1d2a0193384869739e345154a57dda39ed85e732e9dec3579fd4c7b00557e47a43fdc89da978808db594c028361d100731f9df786f3dcabac2c3606ec803c382d94b99b6f0aedf536613df4781d858bba85e14f7df2abf53e5ff6ede10d628caf85393531a90a9d661b48a942f23013cd01a5759f351d1a032cffb4009c227f837021e71e6d391c14b7062cb2bf6b947c60b3e4141b80ba2b0b75a9c6d793829d069369db6666c4111fceea9c00213de95c7e999e927741cdb06b715b6635287dcf798179e83cef31f39b766cd5657905ed3c9e4bed58e0cd38dbb790bbbfdc1dd33d3fb0335dff9ea05ac67530ece5feb04625278c77c33bf230aee937b84b860a29e3e29feedf698c81091dd1b37042c6ca5a8b8be39bb5a8505d14b3e087f37b55de228221c432c1a2c3a759eb3a596c4dc61dd859b18a237db45c378b790c11090cf53ab4d4bf788712da3e6f5501fa1023714383ae8ee1423478bb0d99e4bd14ba3d848b061b8cf190a346b6da6095087d70244e83f1e8489b12e24f70ce7409490f6da6b879e4c3d0e6ae28a533c68ef296976a262f2cd93886a461f10b73b3b19aa357d0e4a11ddf81bea4ef24d765e550575421f9c71afaebd65e5623f5ea0ccb85d7eab7cd1a48608c990db2221ac87a2f2bb5473d098bc48273f38e3a8b178aa1c8bc35a1a503bc6fe1e5008e803f1097ccac701d311ab5f88639a333b3603df3f8192a43462f9b5e4536054b21f74fabd8ded34aee5f7e858800675c7a575e6f9ba461046707aa1a920c19b4cc7c0c19be9646dfa43794bc535be8a1edbb6edce8a72b3c8152155f6e3a522781cc8d6ff7083ae977da19b3ad5137a20343a807dacd81c3f68c8c566eac723320435829ba0503580801f6119e5b1a3d1ed304f82d19dd4deadbfcf3e2b2906c6b904cdc1952d4bffbb05112d64639ed51ee0d748ca0976d21515"}) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c6f777a726469723d2e2f6275732c943260ced76ae8e44cf5cf278025b86f726b6469723d2e2f62696c65312c757070000000000000000066696c6530f65453d4fe580004000000000000a504068de3a24ca753b0bae1de050fd1f591337224baf0ff8b"]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socketpair(0x15, 0x800, 0x8, &(0x7f0000000180)={0xffffffffffffffff}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@multicast2, @rand_addr, 0x0}, &(0x7f0000001580)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001700)={{{@in=@empty, @in=@broadcast, 0x3894, 0xffff, 0x4e21, 0x0, 0x8, 0x0, 0x80, 0x2f, r5}, {0x2b7b, 0xffffffffffffffff, 0xe9, 0x5, 0x8, 0x800, 0x8000, 0x3}, {0xfffffffffffffffb, 0x6, 0x9, 0x7}, 0x7ff, 0x6e6bba, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0x2, @in6=@mcast2, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x7, 0x9}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'batadv0\x00', r5}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r7, &(0x7f0000000840)="2387a49484646f3daacf6ad356d242a02cf17e4a7a1a40508a9922e679903bbfa205e4a1653b5eeb78f75859ef778f53270208808c41794769d94b4e3756dcb65edd32e3dba1ad1bf111c40990b37cda02fc97afc5e9d2e1b6918405252276eda61f08d6b9b1ad2da3df46fd1b57f246717929895d1bd849e7cea7e2334025e88e42fd0c878918dba15917e262ec8d7e1235b4241e67527264ecb7e175301ccdc8a6c341", &(0x7f0000000900)=""/244}, 0x20) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000b80)={r6, 0x1, 0x6, @local}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r8) [ 698.234520][T22952] attempt to access beyond end of device [ 698.260577][T22952] loop2: rw=2049, want=131, limit=63 17:49:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 698.286250][T22952] attempt to access beyond end of device [ 698.300797][T22952] loop2: rw=2049, want=132, limit=63 [ 698.321363][T22952] attempt to access beyond end of device 17:49:48 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40c0, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0xc6, 0x3, 0x1}, 0x1000}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r1) [ 698.335468][T22952] loop2: rw=2049, want=133, limit=63 [ 698.345905][T22952] attempt to access beyond end of device [ 698.356000][T22952] loop2: rw=2049, want=142, limit=63 [ 698.361660][T22952] attempt to access beyond end of device [ 698.367355][T22952] loop2: rw=2049, want=143, limit=63 [ 698.381080][T22952] attempt to access beyond end of device [ 698.386778][T22952] loop2: rw=2049, want=144, limit=63 [ 698.419730][T22952] attempt to access beyond end of device [ 698.451584][T22952] loop2: rw=2049, want=145, limit=63 [ 698.478814][T22952] attempt to access beyond end of device [ 698.490699][T22983] overlayfs: unrecognized mount option "lowzrdir=./bus" or missing value [ 698.515315][T22952] loop2: rw=2049, want=153, limit=63 [ 698.532376][T22962] attempt to access beyond end of device [ 698.571436][T22962] loop2: rw=2049, want=78, limit=63 [ 698.581379][T22989] overlayfs: unrecognized mount option "lowzrdir=./bus" or missing value [ 698.591531][T22962] attempt to access beyond end of device [ 698.603463][T22962] loop2: rw=2049, want=79, limit=63 [ 698.616080][T22962] attempt to access beyond end of device [ 698.624469][T22962] loop2: rw=2049, want=80, limit=63 [ 698.630003][T22962] attempt to access beyond end of device [ 698.655745][T22962] loop2: rw=2049, want=81, limit=63 [ 698.697296][ T27] audit: type=1804 audit(1581788988.494:296): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1082/file0/bus" dev="loop2" ino=188 res=1 [ 698.732993][T22969] attempt to access beyond end of device [ 698.733465][ T27] audit: type=1804 audit(1581788988.534:297): pid=22997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1082/file0/bus" dev="loop2" ino=188 res=1 [ 698.749437][T22969] loop2: rw=2049, want=177, limit=63 [ 698.763637][ T27] audit: type=1804 audit(1581788988.534:298): pid=22969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1082/file0/bus" dev="loop2" ino=188 res=1 [ 698.774970][T22962] attempt to access beyond end of device [ 698.808616][T22962] loop2: rw=2049, want=177, limit=63 17:49:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x4c00, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:48 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x7, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:48 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000240)=0xc) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0xfffffd97) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x97, 0x1, 0x2, 0x18, 0x79, 0x5, 0x3, 0x8, 0x9, 0x5, 0xff, 0xff, 0x7}, 0xe) r3 = socket(0x21, 0x80000, 0x4e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000063000/0x600000)=nil, 0x600000, 0x0, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(0xffffffffffffffff) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r11, 0xae80, 0x0) preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000cd5a825608cc21909f4f3a32970127d9540bb73660159b6f02cba0801dfa58a6276e2955b603aeda6f1ab67cf372215a1416ed8d056ff29839a933ece1ec8c81960bad50a1a856a2ef7d6f210ae8e9427bce0431617fafe0dfdd8e2dfa282f0ab2ab38254878f3e13efcca8e1700b56420631237ffaef081e5defa7f14b61ec2dd3c23d0a2220adfc8ac42a922827f9aae033238f43142f409d53f9880e312e08ebfe3532af7411594eefd806b3faae7a3624bf68ead63587210014dc681168501642fc44a186fd52faa0b53b782bae503e9bcf3093caad762611aa151392028b860e6212bed515a681a1262e08f37f63a", @ANYRES16=r12, @ANYBLOB="000427bd7000ce0000000000000000000000ba000000b02ff2bc1d3b5dfd8029f354a606316232c193632ca03ab811fff0c6013690e78d83cdd0f7c39ee14432337d611bd22b97c91ce3347c6142ef05b89e743aa34ae5ea1f61e2a7f87bc3640e575acb577134f03c86481ba207cb01c6b5596732722c5160982fd10716e0615288aed7eddd2e737270a67a54103ae1790dd816b5903cb50300"/168], 0x1c}, 0x1, 0x0, 0x0, 0x40815}, 0x850) dup2(r3, r2) 17:49:48 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) r3 = socket(0x10, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) fstat(r4, &(0x7f0000000340)) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x3, 0x1, 0x12, 0xfff, 0x1b, "fa1cbaaac7a79d5c41ea55529d237fb80b677be66805f654d60469"}, 0x24, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)={[{@xino_on='xino=on'}, {@nfs_export_off='nfs_export=off'}, {@nfs_export_on='nfs_export=on'}, {@metacopy_on='metacopy=on'}, {@metacopy_off='metacopy=off'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@uid_lt={'uid<', r5}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0xa}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@appraise='appraise'}]}) 17:49:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 698.944879][ T8002] attempt to access beyond end of device [ 698.967363][ T8002] loop2: rw=1, want=218, limit=63 17:49:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x4c01, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:49 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x8, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x541b, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 699.251723][ T27] audit: type=1804 audit(1581788989.054:299): pid=23027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1083/bus" dev="sda1" ino=16842 res=1 17:49:49 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 699.323406][T23027] attempt to access beyond end of device [ 699.407314][T23027] loop2: rw=2049, want=78, limit=63 [ 699.457478][T23027] attempt to access beyond end of device [ 699.474788][T23027] loop2: rw=2049, want=79, limit=63 [ 699.548702][T23027] attempt to access beyond end of device [ 699.560841][T23027] loop2: rw=2049, want=80, limit=63 [ 699.594895][T23048] overlayfs: filesystem on './file0' not supported as upperdir [ 699.604825][T23027] attempt to access beyond end of device [ 699.635035][T23027] loop2: rw=2049, want=81, limit=63 [ 699.661401][T23027] attempt to access beyond end of device [ 699.697249][T23027] loop2: rw=2049, want=130, limit=63 [ 699.708849][T23027] attempt to access beyond end of device [ 699.718942][T23027] loop2: rw=2049, want=131, limit=63 [ 699.724591][T23027] attempt to access beyond end of device [ 699.733746][T23027] loop2: rw=2049, want=132, limit=63 [ 699.740069][T23027] attempt to access beyond end of device [ 699.745789][T23027] loop2: rw=2049, want=133, limit=63 [ 699.762451][T23027] attempt to access beyond end of device [ 699.768267][T23027] loop2: rw=2049, want=142, limit=63 [ 699.775741][T23027] attempt to access beyond end of device [ 699.790452][T23027] loop2: rw=2049, want=143, limit=63 [ 699.795978][T23027] attempt to access beyond end of device [ 699.801729][T23027] loop2: rw=2049, want=144, limit=63 [ 699.807163][T23027] attempt to access beyond end of device [ 699.814284][T23027] loop2: rw=2049, want=145, limit=63 [ 699.820101][T23027] attempt to access beyond end of device [ 699.825794][T23027] loop2: rw=2049, want=153, limit=63 [ 699.846148][ T27] audit: type=1804 audit(1581788989.644:300): pid=23027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1083/file0/bus" dev="loop2" ino=189 res=1 [ 699.872301][ T27] audit: type=1804 audit(1581788989.674:301): pid=23041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1083/file0/bus" dev="loop2" ino=189 res=1 [ 699.876750][T23036] attempt to access beyond end of device [ 699.897234][ T27] audit: type=1804 audit(1581788989.674:302): pid=23057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1083/file0/bus" dev="loop2" ino=189 res=1 [ 699.905326][T23036] loop2: rw=2049, want=245, limit=63 [ 699.933309][T23041] attempt to access beyond end of device [ 699.938994][T23041] loop2: rw=2049, want=245, limit=63 17:49:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5421, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket(0xf, 0x1, 0x5) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r4, 0xd2, 0x0, 0x800, 0x6}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22}}, 0x3, 0x4, 0x7fffffff, 0x2, 0x20, 0x4e, 0x5}, 0x9c) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604010304020000000000000002003d0004000000dd02000000000000400000000000000017010000000000008100000000003800010004000800ff0301000000080000000300000000000000ffffff7f000000003f000000000000000900000000000000040000000000000004000000000000000600000000000080010001000000000035c200000000000001010000000000000200000000000000080000000000000000004800000000009a0a8528d64996e41e01be425b8da6759006f7038fbc66a5387dcc126cfbc48604e907d9714cc5ec7abc3dfdfb2721e672f1207af3819af71744ca7b657c1f7ddb67d9cf6e5186db2651c201276d95d90b6df0ba0e07db29c9d6714c958f842d85cf166bda2d8937202318028aa8c047f00fb24a74b9851239f0c1f39bb156c0c9635aaedf5bcecd6ca51700063d6a8c1b29c471640a35335a6c2be1e56012fed5a626cf38d10185b23f9f2f5ece40a0a12544e78acd3e6fb33019ceebd433b2e4ef5f3e2a9fdeaa9613310f1d0758ff7f000000000000cae2168c23"], 0x18c) dup2(r1, r0) 17:49:49 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000080)={0x2, 0xa, 0x4, 0x40, 0xfffffff9, {0x0, 0x7530}, {0x5, 0xc, 0x6, 0x7, 0x20, 0x9, "b58265e2"}, 0x2, 0x4, @userptr=0x4, 0x6}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) close(r4) 17:49:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:49 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x9, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 700.105364][T23061] overlayfs: failed to resolve './file0': -2 17:49:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5450, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 700.209737][T23075] overlayfs: failed to resolve './file0': -2 [ 700.312281][ T27] audit: type=1804 audit(1581788990.114:303): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1084/bus" dev="sda1" ino=16770 res=1 17:49:50 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x20) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b00000000000000006c65316c757070e5a54d5494c2bfcf0f3a4dc4d0ee114c31bf14cb1bcb7a29d7b0d17d067b47f4150a6bf7eff994e309004a8ef4e8cc5e14f3896e9a9ed979fc674a27283285f8e6a7395e590b0776b74bd0537eb22d31ab7c330518120cb0f59528c48f04b4042fe671d806abb42f71aa863b3ccbd4f608fceebd2c4402eac650f68450a30cc37700"/175]) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r3) write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x0, 0x2, 0x6}, 0xfffffff8}}, 0x18) 17:49:50 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0xa, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 700.407333][T23076] attempt to access beyond end of device [ 700.478180][T23076] loop2: rw=2049, want=78, limit=63 17:49:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5451, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 700.518578][T23076] attempt to access beyond end of device [ 700.560980][T23076] loop2: rw=2049, want=79, limit=63 [ 700.566424][T23076] attempt to access beyond end of device [ 700.584214][T23076] loop2: rw=2049, want=80, limit=63 [ 700.596080][T23098] overlayfs: unrecognized mount option "work" or missing value 17:49:50 executing program 1: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r3, 0xd2, 0x0, 0x800, 0x6}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r3, 0x1, 0x3f, 0x2}, 0x10) 17:49:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 700.657961][T23076] attempt to access beyond end of device [ 700.671999][T23076] loop2: rw=2049, want=81, limit=63 [ 700.691036][T23106] overlayfs: unrecognized mount option "work" or missing value [ 700.698225][T23076] attempt to access beyond end of device [ 700.746440][T23076] loop2: rw=2049, want=130, limit=63 17:49:50 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x32f3bb61) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r3) 17:49:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x0, 0x800000000080002, 0x0) dup2(r1, r0) [ 700.773252][T23076] attempt to access beyond end of device [ 700.808621][T23076] loop2: rw=2049, want=131, limit=63 [ 700.849931][T23076] attempt to access beyond end of device [ 700.855644][T23076] loop2: rw=2049, want=132, limit=63 [ 700.890470][T23076] attempt to access beyond end of device [ 700.901562][T23076] loop2: rw=2049, want=133, limit=63 [ 700.906903][T23076] attempt to access beyond end of device [ 700.912681][T23076] loop2: rw=2049, want=142, limit=63 [ 700.918005][T23076] attempt to access beyond end of device [ 700.926175][T23076] loop2: rw=2049, want=143, limit=63 [ 700.948618][T23076] buffer_io_error: 59 callbacks suppressed [ 700.948632][T23076] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 701.029963][T23076] attempt to access beyond end of device [ 701.055984][T23076] loop2: rw=2049, want=144, limit=63 [ 701.076218][T23076] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 701.095151][T23076] attempt to access beyond end of device [ 701.103418][T23076] loop2: rw=2049, want=145, limit=63 [ 701.110737][T23076] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 701.120476][T23134] overlayfs: filesystem on './file0' not supported as upperdir [ 701.128454][ T27] audit: type=1804 audit(1581788990.924:304): pid=23096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1084/file0/bus" dev="loop2" ino=190 res=1 [ 701.130907][T23087] attempt to access beyond end of device [ 701.158755][ T27] audit: type=1804 audit(1581788990.934:305): pid=23132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1084/file0/bus" dev="loop2" ino=190 res=1 [ 701.196036][T23087] loop2: rw=2049, want=177, limit=63 [ 701.201731][T23096] attempt to access beyond end of device [ 701.207385][T23096] loop2: rw=2049, want=177, limit=63 17:49:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x7, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5452, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:51 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0xb, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x0, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x8000, 0x4) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f7765726469720ee15b944a3c9ae85f3d2e2f6275736b6469723d252f66693d2e2f66696c6530", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES16=r4, @ANYRESDEC, @ANYRES32=r4]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r5) 17:49:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 17:49:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x0, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x5460, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e20, 0x80000001, @rand_addr="b43810eb34c5c1619ab08a29a05833bb", 0x7}}, 0x0, 0x0, 0x23, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 701.413890][T23144] overlayfs: unrecognized mount option "lowerdirá[”J<šè_=./buskdir=%/fi=./file0" or missing value [ 701.489599][T23154] overlayfs: unrecognized mount option "lowerdirá[”J<šè_=./buskdir=%/fi=./file0" or missing value [ 701.609930][T23155] attempt to access beyond end of device [ 701.615755][T23155] loop2: rw=2049, want=78, limit=63 [ 701.622476][T23155] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 701.632225][T23155] attempt to access beyond end of device [ 701.637965][T23155] loop2: rw=2049, want=79, limit=63 [ 701.643569][T23155] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 701.652311][T23155] attempt to access beyond end of device 17:49:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x0, 0x0) dup2(r1, r0) [ 701.658343][T23155] loop2: rw=2049, want=80, limit=63 [ 701.664530][T23155] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 701.678691][T23155] attempt to access beyond end of device 17:49:51 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0xc, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r0) [ 701.703148][T23155] loop2: rw=2049, want=81, limit=63 [ 701.718112][T23155] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 701.768941][T23155] attempt to access beyond end of device [ 701.848796][T23155] loop2: rw=2049, want=130, limit=63 [ 701.896325][T23155] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 701.968745][T23155] attempt to access beyond end of device [ 701.985404][T23155] loop2: rw=2049, want=131, limit=63 [ 702.003810][T23155] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 702.013371][T23155] attempt to access beyond end of device [ 702.021045][T23155] loop2: rw=2049, want=132, limit=63 [ 702.026414][T23155] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 702.038151][T23155] attempt to access beyond end of device [ 702.044306][T23155] loop2: rw=2049, want=133, limit=63 [ 702.060012][T23155] attempt to access beyond end of device [ 702.065719][T23155] loop2: rw=2049, want=142, limit=63 [ 702.073612][T23155] attempt to access beyond end of device [ 702.080014][T23155] loop2: rw=2049, want=143, limit=63 [ 702.085320][T23155] attempt to access beyond end of device [ 702.093599][T23155] loop2: rw=2049, want=144, limit=63 [ 702.099714][T23155] attempt to access beyond end of device [ 702.105448][T23155] loop2: rw=2049, want=145, limit=63 [ 702.111073][T23155] attempt to access beyond end of device [ 702.116701][T23155] loop2: rw=2049, want=153, limit=63 [ 702.122710][T23173] attempt to access beyond end of device [ 702.128403][T23173] loop2: rw=2049, want=78, limit=63 [ 702.133850][T23173] attempt to access beyond end of device [ 702.140364][T23173] loop2: rw=2049, want=79, limit=63 [ 702.145626][T23173] attempt to access beyond end of device [ 702.153708][T23173] loop2: rw=2049, want=80, limit=63 [ 702.159305][T23173] attempt to access beyond end of device [ 702.164958][T23173] loop2: rw=2049, want=81, limit=63 [ 702.201286][T23180] attempt to access beyond end of device [ 702.206946][T23180] loop2: rw=2049, want=245, limit=63 [ 702.215359][T23173] attempt to access beyond end of device [ 702.221327][T23173] loop2: rw=2049, want=269, limit=63 17:49:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x6364, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:52 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000100)={0x2, {0x5, 0xbdb, 0x100}, {0x200, 0xec7, 0x5, 0x2}, {0xd4a, 0x7}}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x262841, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r3) 17:49:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x0, 0x0) dup2(r1, r0) 17:49:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x8, 0x7, 0x4, 0x20000, 0x5, {0x77359400}, {0x1, 0x1, 0x4, 0x3, 0x3, 0x57, "b354feaa"}, 0x4, 0x5, @offset=0x3, 0x6, 0x0, r2}) accept4$x25(r3, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r4 = socket(0x10, 0x800000000080002, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000000)={{{@in=@empty, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) dup2(r4, r0) 17:49:52 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0xd, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x0, 0x0) dup2(r1, r0) 17:49:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x8912, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 702.461695][T23207] overlayfs: failed to resolve './bus': -2 17:49:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) socket(0x10, 0x800000000080002, 0x0) dup2(0xffffffffffffffff, r0) [ 702.677708][T23218] attempt to access beyond end of device 17:49:52 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0xe, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 702.730438][T23218] loop2: rw=2049, want=78, limit=63 17:49:52 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000080)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 702.762321][T23218] attempt to access beyond end of device [ 702.790775][T23218] loop2: rw=2049, want=79, limit=63 17:49:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x8933, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 702.828901][T23218] attempt to access beyond end of device [ 702.860973][T23218] loop2: rw=2049, want=80, limit=63 [ 702.887485][T23218] attempt to access beyond end of device [ 702.906909][T23218] loop2: rw=2049, want=81, limit=63 [ 702.936246][T23218] attempt to access beyond end of device [ 702.954113][T23218] loop2: rw=2049, want=130, limit=63 [ 702.962417][T23218] attempt to access beyond end of device [ 702.999928][T23218] loop2: rw=2049, want=131, limit=63 [ 703.013679][T23218] attempt to access beyond end of device [ 703.035268][T23218] loop2: rw=2049, want=132, limit=63 [ 703.048579][T23218] attempt to access beyond end of device [ 703.054329][T23218] loop2: rw=2049, want=133, limit=63 [ 703.066255][T23218] attempt to access beyond end of device [ 703.077005][T23218] loop2: rw=2049, want=142, limit=63 [ 703.094575][T23218] attempt to access beyond end of device [ 703.105245][T23255] overlayfs: filesystem on './file0' not supported as upperdir [ 703.112897][T23218] loop2: rw=2049, want=143, limit=63 [ 703.118261][T23218] attempt to access beyond end of device [ 703.125745][T23218] loop2: rw=2049, want=144, limit=63 [ 703.145909][T23218] attempt to access beyond end of device [ 703.160334][T23218] loop2: rw=2049, want=145, limit=63 [ 703.165734][T23218] attempt to access beyond end of device [ 703.180905][T23218] loop2: rw=2049, want=153, limit=63 [ 703.186580][T23231] attempt to access beyond end of device [ 703.194675][T23231] loop2: rw=2049, want=78, limit=63 [ 703.199917][T23231] attempt to access beyond end of device [ 703.205557][T23231] loop2: rw=2049, want=79, limit=63 [ 703.213007][T23231] attempt to access beyond end of device [ 703.219710][T23231] loop2: rw=2049, want=80, limit=63 [ 703.224985][T23231] attempt to access beyond end of device [ 703.232854][T23231] loop2: rw=2049, want=81, limit=63 [ 703.286422][T23238] attempt to access beyond end of device [ 703.292825][T23238] loop2: rw=2049, want=245, limit=63 [ 703.301539][T23238] attempt to access beyond end of device [ 703.307210][T23238] loop2: rw=2049, want=269, limit=63 17:49:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) socket(0x10, 0x800000000080002, 0x0) dup2(0xffffffffffffffff, r0) 17:49:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) dup2(r0, 0xffffffffffffffff) 17:49:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:53 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0xf, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:53 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f77658a13ba88b1f56b5d1d5872646972c180000075732c776f726b6469723d2e2f66696c65312c757070657264ab9f205ce89500c84cd696da070645e3e12513140e0764d54a7796923acfbbba5b45613049e84094dd6e4629a5c698314d4660a943a9ceb0f0f48a98f8626570019ac0607fbe5e77d9412c3eede5434d"]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 17:49:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)={0x7}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x0, 0x0, 0x38, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r1) 17:49:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x40049409, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 703.495732][T23266] overlayfs: unrecognized mount option "loweŠºˆ±õk]XrdirÁ€" or missing value 17:49:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) socket(0x10, 0x800000000080002, 0x0) dup2(0xffffffffffffffff, r0) 17:49:53 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f776d722e2f62757366686c65262c75700000000069723d2e2f7c00000000000000000000000000ffffffe50000ea2bbdf8fa8678ee615321f9775fc74b247e3c1d9577a42bfdaebae06463c45fa898276acd9857104641d6749fe78f17fc4ef365357def3ccc0f"]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 703.720478][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 703.720498][ T27] audit: type=1804 audit(1581788993.524:315): pid=23280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1087/bus" dev="sda1" ino=16831 res=1 17:49:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:53 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x10, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 703.792635][T23280] attempt to access beyond end of device [ 703.798314][T23280] loop2: rw=2049, want=78, limit=63 [ 703.872670][T23280] attempt to access beyond end of device [ 703.878344][T23280] loop2: rw=2049, want=79, limit=63 [ 703.955115][T23280] attempt to access beyond end of device [ 704.001584][T23280] loop2: rw=2049, want=80, limit=63 [ 704.008249][T23306] overlayfs: unrecognized mount option "lowmr./busfhle&" or missing value [ 704.025027][T23280] attempt to access beyond end of device [ 704.046422][T23280] loop2: rw=2049, want=81, limit=63 [ 704.052197][T23280] attempt to access beyond end of device [ 704.057029][T23312] overlayfs: unrecognized mount option "lowmr./busfhle&" or missing value [ 704.057901][T23280] loop2: rw=2049, want=130, limit=63 [ 704.074236][T23280] attempt to access beyond end of device [ 704.080291][T23280] loop2: rw=2049, want=131, limit=63 [ 704.085619][T23280] attempt to access beyond end of device [ 704.093695][T23280] loop2: rw=2049, want=132, limit=63 [ 704.099090][T23280] attempt to access beyond end of device [ 704.111039][T23280] loop2: rw=2049, want=133, limit=63 [ 704.116358][T23280] attempt to access beyond end of device [ 704.126385][T23280] loop2: rw=2049, want=142, limit=63 [ 704.134353][T23280] attempt to access beyond end of device [ 704.140061][T23280] loop2: rw=2049, want=143, limit=63 [ 704.157718][T23280] attempt to access beyond end of device [ 704.164193][T23280] loop2: rw=2049, want=144, limit=63 [ 704.169582][T23280] attempt to access beyond end of device [ 704.175299][T23280] loop2: rw=2049, want=145, limit=63 [ 704.180667][T23280] attempt to access beyond end of device [ 704.186300][T23280] loop2: rw=2049, want=153, limit=63 [ 704.226765][T23317] attempt to access beyond end of device [ 704.242367][T23317] loop2: rw=2049, want=245, limit=63 [ 704.247959][ T27] audit: type=1804 audit(1581788994.044:316): pid=23280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1087/file0/bus" dev="loop2" ino=193 res=1 17:49:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x600, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0xfc) dup2(r1, r0) 17:49:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x4008af00, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, 0xffffffffffffffff) 17:49:54 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:49:54 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x11, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/246, 0xf6}, {&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/235, 0xeb}], 0x9, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r1) 17:49:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x40186366, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, 0xffffffffffffffff) [ 704.515589][T23335] overlayfs: failed to resolve './file0': -2 17:49:54 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) r3 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x2}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)="f34f9b6fe78369878237b83879d22c4285e84bd3b09be4b1a3825f7b0cff9271dd09d1cf2377d2eb3e0eb8bae59bc537d2b0c3e6f3374b09861bb8e9658c274f0de332d291979e3aa8de9964035e8175f269785854b0594f2fddc9a2f235373a04c351964e31f6b3c55f84f3bc9c3bdaae00fa90f7012dcf07a141729c6b23090d8a30428f169206b75e10c3c36b19cba96963d5ee496048f7fe08b0be0caf0c7885debbbf6f857af5ffcdeb8de5e87d068a0b42613492cf33fbbf2a2cceb70d3b469e7d21a5a46545fde57f8e934d69a065c82dd747ae401d7720d78bb861a786", 0xe1}, {&(0x7f0000000180)="3d9ea639a301bc8d12970701fd365a2c4194e4e7be3e88e6cf320a", 0x1b}, {&(0x7f00000001c0)="9713d70fcb178929e6fe1e7126", 0xd}, {&(0x7f0000000240)="327c95fb97778ee60c03af0f64671141a2a61811cb2e99e3163cea52283837753a1e16842115950cbea8ae7034bd9a3821c580b497cbc7e593", 0x39}, {&(0x7f0000000340)="ca143451308e3f0b251fea9455f7a30668405b95d4cc3976b6e08f780f3fe61be235ed7f2b78618e8c2f422c0efd55d1b27b6704c24d0b7be009426acfafabe8a6d7d66cb52da4e11b5e37112bc72f5683ca7a948221cde9d0d83759512aa9356c76589d041bd854e62aa6f3ad88ccd248adddaf2233ad2ecde9e07a3cac9f0cb5462538836b8c8536554411b420bb3bde", 0x91}, {&(0x7f00000002c0)="b60374264c930d6c6a860c08a74292e8d5ffe9768bcb72802facc26d9577faa6cca7ce20ea91641e9674", 0x2a}], 0x6, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x34e}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x48}, 0x0) 17:49:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x4020940d, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 704.694088][ T27] audit: type=1804 audit(1581788994.494:317): pid=23342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1088/bus" dev="sda1" ino=16486 res=1 [ 704.868721][ T27] audit: type=1804 audit(1581788994.564:318): pid=23349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1088/file0/bus" dev="sda1" ino=16612 res=1 17:49:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6802, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:54 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x12, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipx\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2040, 0x0, "15053af6bc99b30249d7436aa03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfffae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff8400"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r1) 17:49:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, 0xffffffffffffffff) 17:49:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x800448d2, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 705.006640][ T27] audit: type=1804 audit(1581788994.564:319): pid=23349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1088/file0/bus" dev="sda1" ino=16612 res=1 17:49:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x800454d2, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 705.119585][T23370] overlayfs: failed to resolve './file0': -2 [ 705.127877][ T27] audit: type=1804 audit(1581788994.634:320): pid=23355 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1088/file0/bus" dev="sda1" ino=16612 res=1 17:49:55 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f000000d180), 0x4000000000000eb, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f000000d180), 0x4000000000000eb, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'veth0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f000000d180), 0x4000000000000eb, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f000000d180), 0x4000000000000eb, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r4, @ANYRES32, @ANYPTR, @ANYBLOB="209f3471107eb08915d1720231e0d9deb83d176170bf69c1b41271ae043d5615337573a027e6ceff9b6b7427b6b49ecfdf3c2a44011b6fcd9f18d8cd5804227d25dd411994515711b750bb1b9edd1ee9a1a05d693316ab33484fedc4c4fe9e5154af32bf38035a92f6", @ANYPTR64, @ANYRES32=r5, @ANYRES16], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64, @ANYRESOCT=r6, @ANYRESHEX, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESDEC], @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES64=r9]]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r10) 17:49:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500e967f108100e9503e4b4090008000c0006e1ffff2e0015000410000000000000000000000000004000"/57, 0x39}], 0x1}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000000180c289030086dd6076605100300000fe80034300050dff000032c8e500"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090417feb1ae7aa77cf40000ff3f020000000000000000001014190004", 0x23}], 0x1) sendmmsg$alg(r1, &(0x7f0000000140), 0x6b7, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'macsec0\x00'}}, 0x1e) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x4000, 0x1, {0x0, 0x7530}, {0x5, 0x1, 0x7, 0x5, 0x1, 0x7f, "a32c567e"}, 0x1, 0x4, @planes=&(0x7f0000000140)={0x2, 0x401, @userptr=0x1000, 0x5}, 0x8, 0x0, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8000010, r4, 0x100000000) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x4) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000000c0)=0x3) dup2(r2, r0) 17:49:55 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x13, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:55 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x3, 0x0, [], [{0x0, 0x9, 0x401, 0x6, 0x401, 0xff}, {0x5, 0x2, 0x5, 0x25, 0x1, 0x4c}], [[], [], []]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) prctl$PR_CAPBSET_READ(0x17, 0x23) close(r3) [ 705.353749][T23399] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 705.371294][ T27] audit: type=1804 audit(1581788995.174:321): pid=23392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1089/bus" dev="sda1" ino=16885 res=1 [ 705.459071][T23392] attempt to access beyond end of device [ 705.489025][T23392] loop2: rw=2049, want=78, limit=63 [ 705.494301][T23392] attempt to access beyond end of device [ 705.547991][T23397] overlayfs: unrecognized mount option "À" or missing value [ 705.561316][T23392] loop2: rw=2049, want=79, limit=63 [ 705.566568][T23392] attempt to access beyond end of device 17:49:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x80045643, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 705.590854][T23392] loop2: rw=2049, want=80, limit=63 [ 705.605173][T23392] attempt to access beyond end of device [ 705.618838][T23392] loop2: rw=2049, want=81, limit=63 17:49:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 705.636252][T23392] attempt to access beyond end of device [ 705.675522][T23392] loop2: rw=2049, want=130, limit=63 [ 705.726702][T23392] attempt to access beyond end of device [ 705.746509][T23392] loop2: rw=2049, want=131, limit=63 [ 705.787353][T23392] attempt to access beyond end of device [ 705.814386][T23392] loop2: rw=2049, want=132, limit=63 [ 705.842614][T23392] attempt to access beyond end of device [ 705.853423][T23428] overlayfs: failed to resolve './file0': -2 [ 705.866172][T23392] loop2: rw=2049, want=133, limit=63 [ 705.900917][T23392] attempt to access beyond end of device [ 705.920529][T23392] loop2: rw=2049, want=142, limit=63 [ 705.937062][T23392] attempt to access beyond end of device [ 705.949796][T23392] loop2: rw=2049, want=143, limit=63 [ 705.961657][T23392] buffer_io_error: 46 callbacks suppressed [ 705.961668][T23392] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 705.976436][T23392] attempt to access beyond end of device [ 705.982459][T23392] loop2: rw=2049, want=144, limit=63 [ 705.988009][T23392] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 705.998175][T23392] attempt to access beyond end of device [ 706.006347][T23392] loop2: rw=2049, want=145, limit=63 [ 706.013125][T23392] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 706.023538][T23392] attempt to access beyond end of device [ 706.030385][T23392] loop2: rw=2049, want=153, limit=63 [ 706.036035][T23404] attempt to access beyond end of device [ 706.043659][T23404] loop2: rw=2049, want=78, limit=63 [ 706.051604][T23404] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 706.061981][T23404] attempt to access beyond end of device [ 706.067623][T23404] loop2: rw=2049, want=79, limit=63 [ 706.074805][T23404] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 706.100461][T23404] attempt to access beyond end of device [ 706.106155][T23404] loop2: rw=2049, want=80, limit=63 [ 706.111779][T23404] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 706.120352][T23404] attempt to access beyond end of device [ 706.126559][T23404] loop2: rw=2049, want=81, limit=63 [ 706.131815][T23404] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 706.143041][ T27] audit: type=1804 audit(1581788995.944:322): pid=23392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1089/file0/bus" dev="loop2" ino=194 res=1 [ 706.170421][ T27] audit: type=1804 audit(1581788995.974:323): pid=23435 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1089/file0/bus" dev="loop2" ino=194 res=1 [ 706.171467][T23404] attempt to access beyond end of device [ 706.200616][T23404] loop2: rw=2049, want=245, limit=63 [ 706.206314][T23404] attempt to access beyond end of device [ 706.212067][T23404] loop2: rw=2049, want=245, limit=63 17:49:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6803, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:56 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x14, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:56 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:49:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x80086301, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:56 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000780), 0x5}, 0x100, 0x0, 0x0, 0x0, 0x40}, r0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vhci\x00', 0x2000) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/248, 0xf8}], 0x1, 0xfffffffffffffffd) recvmsg$can_j1939(r2, &(0x7f0000000740)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/192, 0xc0}, {&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000580)=""/132, 0x84}], 0x8, &(0x7f00000006c0)=""/99, 0x63}, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r4 = socket(0x10, 0x800000000080002, 0x0) dup2(r4, 0xffffffffffffffff) 17:49:56 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f000000d180), 0x4000000000000eb, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f000000d180), 0x4000000000000eb, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x1, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYRES16, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r4, @ANYRESDEC=r1, @ANYRESOCT=r5]]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r8) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r11, &(0x7f00000017c0), 0x3da, 0x0) ioctl$UI_ABS_SETUP(r11, 0x401c5504, &(0x7f00000002c0)={0x6, {0x5, 0xbe4a, 0x7, 0x6, 0x1, 0x200}}) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f000000d180), 0x4000000000000eb, 0x0) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000700)=""/85, 0x55}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) r14 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x2, r9}, {0x2, 0x0, r13}, {}], {0x4, 0x4}, [{0x8, 0x0, r14}], {0x10, 0x6}, {0x20, 0x2}}, 0x44, 0x1) 17:49:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0x80805659, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:56 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x40a0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000002}, 0x0, 0xfffffffffffffffe}, r2, 0xffffffffffffffff, r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x20, @local}}, 0x0, 0x0, 0x44, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) r4 = socket(0x10, 0x800000000080002, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) dup2(r4, r3) 17:49:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 706.440305][T23440] overlayfs: unrecognized mount option "€" or missing value [ 706.569995][ T27] audit: type=1804 audit(1581788996.374:324): pid=23452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1090/bus" dev="sda1" ino=16771 res=1 17:49:56 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 706.658438][T23452] attempt to access beyond end of device 17:49:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fb4e21000008000700ff0300003c00028005000d000100000008000500060000000800030002000000060002004e2300000800090009000000080008000600000005000d000100000008000400400000001800038014000600fe880000000000000000000000000101"], 0x84}, 0x1, 0x0, 0x0, 0x20000050}, 0x11) dup2(r1, r0) [ 706.700388][T23452] loop2: rw=2049, want=78, limit=63 17:49:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0xa0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x181402, 0x0) dup2(r2, r0) [ 706.735373][T23474] overlayfs: unrecognized mount option "€" or missing value [ 706.751470][T23452] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 706.835236][T23452] attempt to access beyond end of device [ 706.847547][T23452] loop2: rw=2049, want=79, limit=63 [ 706.872202][T23452] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 706.911865][T23452] attempt to access beyond end of device [ 706.934874][T23452] loop2: rw=2049, want=80, limit=63 [ 706.961166][T23452] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 706.983523][T23452] attempt to access beyond end of device [ 707.003164][T23452] loop2: rw=2049, want=81, limit=63 [ 707.011892][T23452] attempt to access beyond end of device [ 707.017672][T23452] loop2: rw=2049, want=130, limit=63 [ 707.027089][T23452] attempt to access beyond end of device [ 707.038362][T23452] loop2: rw=2049, want=131, limit=63 [ 707.051787][T23452] attempt to access beyond end of device [ 707.067503][T23452] loop2: rw=2049, want=132, limit=63 [ 707.086006][T23452] attempt to access beyond end of device [ 707.100554][T23452] loop2: rw=2049, want=133, limit=63 [ 707.105982][T23452] attempt to access beyond end of device [ 707.111956][T23452] loop2: rw=2049, want=142, limit=63 [ 707.117293][T23452] attempt to access beyond end of device [ 707.123039][T23452] loop2: rw=2049, want=143, limit=63 [ 707.128617][T23452] attempt to access beyond end of device [ 707.134278][T23452] loop2: rw=2049, want=144, limit=63 [ 707.139653][T23452] attempt to access beyond end of device [ 707.145334][T23452] loop2: rw=2049, want=145, limit=63 [ 707.150711][T23452] attempt to access beyond end of device [ 707.156479][T23452] loop2: rw=2049, want=153, limit=63 [ 707.162250][T23470] attempt to access beyond end of device [ 707.169585][T23470] loop2: rw=2049, want=78, limit=63 [ 707.174939][T23470] attempt to access beyond end of device [ 707.180620][T23470] loop2: rw=2049, want=79, limit=63 [ 707.185918][T23470] attempt to access beyond end of device [ 707.191678][T23470] loop2: rw=2049, want=80, limit=63 [ 707.196903][T23470] attempt to access beyond end of device [ 707.202616][T23470] loop2: rw=2049, want=81, limit=63 [ 707.228889][T23476] attempt to access beyond end of device [ 707.234593][T23476] loop2: rw=2049, want=245, limit=63 [ 707.242745][T23470] attempt to access beyond end of device [ 707.254864][T23470] loop2: rw=2049, want=245, limit=63 17:49:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:57 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') sendmmsg(r0, &(0x7f00000026c0)=[{{&(0x7f0000000080)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ecb-camellia-aesni,blake2s-128-generic)\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="52c6fa7b08863a35f8050a937a49def61feabdd5a05b80d48449aef8de5741a1876fdce8704e2685377fcdf88d11a084ad5aca92be1de71f15eb7c", 0x3b}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000340)="fb4555f8e3448af81b17cccabbc8d63fe3baf29b9a386f73395fa94272a6bdbe3b9e3ec226462658faf992ea07a38abe13c00d014fbee028e38f172055a801efb1c53f0806242481e2390057f5ff01230f985d747c2c9188a825b519f4c58a7397f7915b3890eb1a30ffaf7c87c314c934950efc79dffc2bdbf297a13417f7cf00735c9c9d83a47511148c25bdc87ae4ca413c", 0x93}], 0x3}}, {{&(0x7f0000001440)=@generic={0xc2514b2a66cb3c04, "66504d8197c0defad6060c38415e6024b7f8aebcd1e36ed0a56bda6b2830d1bca2250cc3453d870137b933d1af13a327240213c83ad2357d2afdd6dba7368090b1642ed80327325b1f446ed6c9e92d92a24e5f93467cb86e25129f7ce5e7ad39b3e1c96822b98f332e17bd25302a31ae5c93906df348a8386aa193a19aae"}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000014c0)="af9437b8083c86848fb48c55785ceea5a2a36daa103975c2e6cdc6c1981796878cc0cc51b0f25f6180c225e44b06b771459edeea372867af40b287fd6f3da87bb4a2c31cef68b1d4038f6e1a4d3c9f4aa9a9fa43fee602747dbf87004a91dd74c54a", 0x62}], 0x1, &(0x7f0000001540)=[{0xe8, 0x105, 0x7, "ef0d25abb1c9f262a119f84f7a8e82adfc204abdb737f8746f75651256d4f0fee40e372ec84d685aa7d19de79741f98b915cf01b55c527209fdadfb6b8442070ee8082a363d43fca61c79e8db41e4f466bf35e56c7f84d86ae3b4ae2c869a893d0fc3a01c7265309d1c5cc5bf1ab66bacc16fb65a91634e239845cec4565df0d4b69e98ea60330b5a39d72d419e67d70a1e54e995aa67d86ad416427a64f85793a67aaa10601c991c5d15f3d4b00ae2a338e9b148ee9a0d10b865c81c28c417cb35267e7860b0fe11a5b473aef35649ab2b79b97c12fc1"}, {0x50, 0x10b, 0xf93, "5d545fdcea34acd2e1c10afbdbe9e76b2089253ffc6e0fa98fa3d450f134d34c5501fe49df12ac4641a1f79689b54d2eb1d5ed7345da1a4f447990a6bc95"}, {0x30, 0x115, 0x3f, "5e6495dc9f93675939838aa7801a6f5a56c3c0266bec9534c153fc92"}], 0x168}}, {{&(0x7f00000016c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001740)="4b2fbaf61467bd19fb9d2c5f4213232c80a9a415769df96a364f810f4d61b52ea8e78becd091a77190debd638653b016fc3ee89039dbb7841784a353625577e5b857b4b4513e8fddfc254637688eba8dd0ed4e0dbe790a5382b4fc3f4ef06e09ba756d0be4d60cf71ab522cc074b8579e84bc9f508a6ff44cf2cd1", 0x7b}], 0x1, &(0x7f00000017c0)=[{0xf0, 0x10d, 0x2, "e36b9fc1024b3eafb09d7f56927c5afee825c934d042a63a5cdcb20125fc47615fc9a2389191485869dc28933865da3d9cb4f76217be82220b5a5e5899aea2949e84ad0345cc44bca90d3fd6e3914d5bad004a2e81650138ca890a2cae09b53145e8217e6c7692a72bfd950d8ee7324919ced4c5ce52ce2a95535b69e79f0aa9575716055f4f3b2d9e054c96856663f8d430dffbba6e7a35357266b94f2f5e6f21ea2d186d72c957796d53340a45cfa81e2b25e165344b85538497317e7d650b518fad37404f61eb84b08c3f56044f2f18fd34eaac3836a71b23"}, {0xf0, 0x118, 0x5, "b46f9a83b875ce64b2fa4b6ac6697a209f5f66bc6ada57405aea4cb27e9626451abc1d8aad10d6c07361102c9fb5cbdd0c02f969e33e3993e47b1d2b096f814af75c8422eeaf449987300c297cba10dc27c7f6e30b2077bf556727fac162c074a5dd03ffad41029cb6ed0e7e7fd2317fe506d73f9892f5aaf76db78d581b0ff3be243a5129ff5c5681b007fe11589568c00d6d2830e04bc4be64d4a68ef4e8230a48e274e72ad11aa2ca688bc6ec82960c7bae9fc37aa5dffddfa0e6827bb1fa6a15c43df55bdd534e84f1b16bb35dae033daebac7db4a7174f1be8484"}, {0x58, 0x6, 0x400, "b36548bc449729826f095800eb6ea63af430ae712b20616a56dc4c1eb81c241603ebc7e39879d9869bfa8654491c3ff491b8aef11a1a901cde47f6f54592dc57df8ea015"}], 0x238}}, {{&(0x7f0000001a00)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a80)="a748942e7058adf95107275c498d1599775c79fadd8b056dc98f07c4bb3bb43d52d831c7408ac57390ebecb11fbc8f81387cbcdfd62d0db74fac2acdaf62e350c8f2e91e9333ca23b688dd17e98727516b9fb22250e036645f962edc008153c91267c8b49027fa0966d6045874832999a1715a865700e28c6aeecf45836ac9445f060f73efc863503858ad025189714b3a4de6cdaa325f6b4d", 0x99}, {&(0x7f00000002c0)}, {&(0x7f0000001b40)="04b5369a8d31c92596e5d9b85de8d859a73ad852585a4e3cfa0c63d2f2699c9e4f5cbda0d34af679bd9da75d4c81f30c9eec05df5026dacfe48b11be85726b5474730db110b0e74b4ff373f3a77d2785c339d7da17fb7fc567639b7b8c", 0x5d}, {&(0x7f0000001bc0)="bceae030c20a4e5a5f5df482692af6b70cc8bf45c9181c91e4a16c2ae13cfdf7cd2fad2124d891fa9ff08204d5286e36ffa81942abe8e0e92b2ffac643f27aa7dc34b713e324f1e92a42fcbc018e23c3f37c67a7b4fba035c4", 0x59}], 0x4}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c80)='D}u', 0x3}], 0x1}}, {{&(0x7f0000001d00)=@ipx={0x4, 0x5, 0xa5f9, "b8eff0ec71f7", 0x1}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001d80)="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", 0xfd}, {&(0x7f0000001e80)="2b7fdcd9231738a74b23cd5041a94908b42d92b6e5df34c58a20caacfd6d74bdf885c36de8d42ad59a62c88bb5bad6f6ceb730eb538fa5abd24fcccb7b1e57f0fb3d6ac36e2e864b40de9fa84f243b5ef1020d3e39", 0x55}, {&(0x7f0000001f00)="51c60eea9698ebcda7ab800a62738c9dca0efa6b3c2cc4aafd3d23e882f42835c5a57bc06cf2d8e54a0ad3c21937167399521b9a17c7a93d236ef6b9ed05cb2a0b217ca57b6ebe654b5b0b15aa62e41c03d6ee9b8b1140fa68ff7fef4497b359c774f04624f6834aae21681aec49489ae039c688b12fdd016c23cc9db1b86979064315ad0c96704982c14e7f8913526c57862a80daaf349e8c3af3f596320e9b8e9729c31c487eb912a6894e653a6fe4296e1d7bcf3e434c815b7aa21d1591df847fdbe133669b3233f72a4eb87302f8b907887161f80d", 0xd7}, {&(0x7f0000002000)="1f8a8493a22d1917d7d7c0220213b15504765dc918570ac5deeea40cd646e0e8af614087f8719cd54172c34a2119447d1a3c0f1b4b67af14a5e82b896dba08377d6bad0fbc82c5a3a16362fd951b44bab5b20cd9fd659ac86d09f062e4af7809208dc53bdf53a1e71be8d6932b415c9261855dfa113232e64425c7e5c5318da8bb2e19d6e1b7", 0x86}, {&(0x7f00000020c0)="6f2cd6a32f8e8a80ec8b1d58a29fec53b154e4aba844b8ddb758053b60dd28f733e3b2573f95531d67cd3d742d390beb3a75f8232ead3a1f2f7098783c5512c016e60532a70c", 0x46}, {&(0x7f0000002140)="3d9c85107e22aa6f5e1aa6acae39eb546f7a576ed3d70851", 0x18}, {&(0x7f0000002180)="027da380bafb3d5fea1501c966022289fe8c301612aa6cbec063f4181f896ea0a7314d3a169b28540aa9bb0e48c47f94b81afae516770bf4de5b43e93551076202c6bd", 0x43}, {&(0x7f0000002200)="792f43956a25831c0c53d546d734001c44e1d68779c1a256a0476640cba56540d7e456e48e2f561e38f463d274a50941b184cfb56793e8274852e0ece3cd8fbc4c862031418f6b0c11f21d4369d09a966cd263f941d0dbbdb3b26cdd0db31da2a573acc5c3f4829bf080a06db27203e1b4531d481aadbfa4", 0x78}, {&(0x7f0000002280)="b2177af6ef6f78d4b3f9c30efa8cef7bad8c0c0b6c98687f4fb5b066a9345d6e89b950ca9154b57b1343ad4b2826ff9aa68bac3fb0f0f64c846f68cf66e26454cd1653d79db81438a79a60b980b60daf254941327264b7662e2baed6fc736c0cc0dbaf9f25fcd916468d75f2cebe0c2de22443d149aac3e2a1d27f2a904239a75ea3494a50e6f01d4c79beb8749453e35e4060dee90a58b3c3704b59e9b83f86cc7025ec741f3c9bdd10eb229a634acaec605529f9e205fe6dbc65ef78204ca5b9d7ea03d259088f95935538f5fe8e33c89c450d16b4be23f572b453b62d2a369a5ea6e0b6e2d381789e29fc652b6dbba45a79602d5e", 0xf6}, {&(0x7f0000002380)="6727567f310cc55a22647fdcdf1aeee5b5239d2289dc4200d3a54031cec21abccee299a126cd4b0d0f116a057ecb9b6594da784c6e66eb1744e869a0730c7e045ab3da21cb568e242778385d08939539", 0x50}], 0xa, &(0x7f00000024c0)=[{0x108, 0x1, 0x1ff, "609fcd436bd8f5a20243b10e70e692f072196524cf1fa11a47df0a1f389d392e2806a35cf7006518eadc3d816dceba41054b41de4537eee7e04af8b9c5a755c3f554ca97c4b797d087dffb5b1c48f46eb48cd74e7c73b6ccb6e382d05832df9f90f52f74913b0a7b182776f1514eecaeba7c04296e0dd966a09eed620ec63763d27ec8a63f570155f18a6fbe8645f8548e1bf5d1600903710ece5fc22498b85bfa39417f9cad91ae8649c0b93812b40dc87fbd468f7394de39002ba63061afcf55799e4be57569c826cd62628db8eef35b4c3aeeab944311b4deaaa8d6d8e1c4dc366f982bffdb43f8ca628a0f1420d242f8"}, {0xc0, 0x10b, 0x1ff, "25dbafe697c5ea7c083cc087a1bc1b55aeccec24adc7d05b53a22f0f4e1ea7d966e1a522800e582d8e2ad397aa9b74ed194d72d652cb82f79a0ca4971ced71631b3eb16e1aa7c0a98bbcfd34219671dadffd5d560d4a4dd267bd1ac8126dc0d3af22996362d3c1e97f77a76582a8cd3248252d05e8fd329d68ec9f5bf8bf9c15308d8139a7956ca7b43809e9e93e49fee484dd91373c3b923b5f95516958c8dff9bbc5da74df89a08fd0e133bad3e160"}], 0x1c8}}], 0x6, 0x8080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mount(&(0x7f00000002c0)=@nullb='/dev/nullb0\x00', &(0x7f0000002840)='./file1\x00', &(0x7f0000002880)='ramfs\x00', 0x1, &(0x7f00000028c0)='trusted1xeth0]nodevcpusetwlan0bdeveth0\x00') r3 = semget(0x2, 0x2, 0x100) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000002900)=[0x9e5]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r4) 17:49:57 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x16, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x6, @local, 0x7fff}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x74, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980acf, 0x2, [], @p_u8=&(0x7f0000000000)=0x1}}) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000000c0)) r4 = socket(0x10, 0x800000000080002, 0x0) dup2(r4, r1) 17:49:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x2, 0x3, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0x5d) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000200)={0x101, 0x2, 'client0\x00', 0x1, "3fc645d43ec61ea9", "486c1370ba84929b3fb9fec7e63526c7c9995f09c7b407f42faf45d964c3d017", 0x3, 0x1}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r2, 0x800, 0x9, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000000) dup2(r1, r0) 17:49:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = dup2(r1, r0) accept4$alg(r2, 0x0, 0x0, 0x80800) 17:49:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 17:49:57 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlockall(0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:49:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = dup2(r1, r0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x6, 0x0, [{0x2f1, 0x0, 0x3}, {0x23c, 0x0, 0x7fff}, {0x2d9, 0x0, 0x7}, {0x9df, 0x0, 0x74}, {0xa5c, 0x0, 0x1}, {0x3a2, 0x0, 0x7ff}]}) 17:49:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x38, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = dup2(r1, r0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)={0xcf, 0x7dcf5b3ff439baf8, 0x4, 0x200000, 0x80000001, {0x0, 0x2710}, {0x2, 0x8, 0x20, 0x0, 0xcc, 0x7, "60d372d3"}, 0x233, 0x1, @fd=r3, 0x3, 0x0, r4}) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000080)={0x0, 0x0, [0x80000001, 0x5, 0x3f, 0x8, 0x4, 0x7f, 0x20, 0x81]}) [ 707.776715][T23517] attempt to access beyond end of device [ 707.831881][T23517] loop2: rw=2049, want=78, limit=63 [ 707.866372][T23517] attempt to access beyond end of device [ 707.898631][T23517] loop2: rw=2049, want=79, limit=63 [ 707.906752][T23537] overlayfs: failed to resolve './bus': -2 [ 707.938665][T23517] attempt to access beyond end of device [ 707.968688][T23517] loop2: rw=2049, want=80, limit=63 [ 708.018593][T23517] attempt to access beyond end of device [ 708.041412][T23517] loop2: rw=2049, want=81, limit=63 [ 708.108655][T23517] attempt to access beyond end of device [ 708.140238][T23517] loop2: rw=2049, want=130, limit=63 [ 708.176545][T23517] attempt to access beyond end of device [ 708.203985][T23517] loop2: rw=2049, want=131, limit=63 [ 708.212059][T23517] attempt to access beyond end of device [ 708.227427][T23517] loop2: rw=2049, want=132, limit=63 [ 708.232804][T23517] attempt to access beyond end of device [ 708.238433][T23517] loop2: rw=2049, want=133, limit=63 [ 708.243805][T23517] attempt to access beyond end of device [ 708.249455][T23517] loop2: rw=2049, want=142, limit=63 [ 708.254744][T23517] attempt to access beyond end of device [ 708.260712][T23517] loop2: rw=2049, want=143, limit=63 [ 708.266005][T23517] attempt to access beyond end of device [ 708.271812][T23517] loop2: rw=2049, want=144, limit=63 [ 708.277103][T23517] attempt to access beyond end of device [ 708.283486][T23517] loop2: rw=2049, want=145, limit=63 [ 708.288901][T23517] attempt to access beyond end of device [ 708.294528][T23517] loop2: rw=2049, want=153, limit=63 [ 708.300106][T23538] attempt to access beyond end of device [ 708.305742][T23538] loop2: rw=2049, want=78, limit=63 [ 708.310998][T23538] attempt to access beyond end of device [ 708.316631][T23538] loop2: rw=2049, want=79, limit=63 [ 708.321857][T23538] attempt to access beyond end of device [ 708.327593][T23538] loop2: rw=2049, want=80, limit=63 [ 708.332857][T23538] attempt to access beyond end of device [ 708.338562][T23538] loop2: rw=2049, want=81, limit=63 [ 708.343765][T23538] attempt to access beyond end of device [ 708.349512][T23538] loop2: rw=2049, want=130, limit=63 [ 708.354807][T23538] attempt to access beyond end of device [ 708.372114][T23538] loop2: rw=2049, want=131, limit=63 [ 708.377415][T23538] attempt to access beyond end of device [ 708.383155][T23538] loop2: rw=2049, want=132, limit=63 [ 708.388449][T23538] attempt to access beyond end of device [ 708.395316][T23538] loop2: rw=2049, want=133, limit=63 [ 708.400738][T23538] attempt to access beyond end of device [ 708.406366][T23538] loop2: rw=2049, want=142, limit=63 [ 708.411722][T23538] attempt to access beyond end of device [ 708.417462][T23538] loop2: rw=2049, want=143, limit=63 [ 708.422775][T23538] attempt to access beyond end of device [ 708.428450][T23538] loop2: rw=2049, want=144, limit=63 [ 708.433759][T23538] attempt to access beyond end of device [ 708.439415][T23538] loop2: rw=2049, want=145, limit=63 [ 708.446524][T23538] attempt to access beyond end of device [ 708.452217][T23538] loop2: rw=2049, want=177, limit=63 [ 708.457752][T23538] attempt to access beyond end of device [ 708.463489][T23538] loop2: rw=2049, want=177, limit=63 17:49:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 17:49:58 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x17, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff2000/0xc000)=nil, 0xc000}, &(0x7f00000000c0)=0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r0) 17:49:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x2, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:58 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) write$P9_RCLUNK(r0, &(0x7f0000000340)={0x7, 0x79, 0x2}, 0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) lseek(r3, 0xfff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x6cb}, 0x8) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xd4000, 0x0) bind$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="15930000000000000000670000000800178100000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x30}, 0x4000804) preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000800)=""/151, 0x97}, {&(0x7f0000000780)=""/74, 0x4a}, {&(0x7f00000005c0)=""/203, 0xcb}], 0x4, 0x7) r10 = openat$cgroup_ro(r5, &(0x7f0000000240)='pids.events\x00', 0x7a05, 0x1700) close(r10) 17:49:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:58 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000000000100000000000000ff0f00157c1ac49b001ea76204000000000000000693ca0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000572ff43483f7976799858620f4100b786d21df462a2e7aa1b4d8"]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x7f, 0xcf, 0x40, 0x81, 0x0, 0x5, 0x31, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7fffffff, 0x5}, 0xa, 0x95f, 0x7fff, 0xa, 0xbcbe, 0x6, 0x7}, 0x0, 0x4, r0, 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x3ff, "666b9b886fba70cd973a95bac1854b7fa8be5fe554c66ed0e7ecab385dafb6d4", 0x23da38ceb4a7bf8d, 0x5, 0x3, 0x10, 0x1000801, 0x2}) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r1) [ 708.734025][T23575] overlayfs: failed to resolve './file0': -2 [ 708.804961][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:49:58 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x18, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:49:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000040)=""/102, &(0x7f0000000100)=0x66) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000000)={0xa, {0x9, 0x9b, 0x8}}, 0xa) dup2(r1, r0) [ 708.960874][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 708.960898][ T27] audit: type=1804 audit(1581788998.764:330): pid=23591 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1092/bus" dev="sda1" ino=17121 res=1 17:49:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 709.032872][T23567] overlayfs: failed to resolve './file0': -2 [ 709.072999][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 709.101448][T23579] attempt to access beyond end of device 17:49:59 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 709.148819][T23579] loop2: rw=2049, want=78, limit=63 [ 709.158925][T23579] attempt to access beyond end of device [ 709.202109][T23579] loop2: rw=2049, want=79, limit=63 17:49:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) socket(0x10, 0x800000000080002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) dup2(r1, r0) socket$netlink(0x10, 0x3, 0x5) 17:49:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000480)='/dev/null\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, 0x0, 0x200, 0x100, r3) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000b00)="31b1b6a72c55a5caf89b26e411bd34e3f7f15261348bd749991484864e096f3ce07a6ad5882e4930dc87e4ce50b8c7affab7834342f7d9a4df84c6b520a884ae758d3fefd1e428978e19132c0fb4ed5a4d20bf384977c28612549708726673f11174f64d46ffebf4e2a1767d7a4fd867448298c3e7a7e21d72b0134996cbb5ab748de50d7dbdbdb164b560c24e62b31c", 0x5a, r2) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r4, 0x0) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@mcast1, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xffffffffffffffff, r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xffffffffffffffff, r10) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xffffffffffffffff, r12) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r14, 0xee01, 0x0) getgroups(0x2, &(0x7f0000000780)=[0xee00, r14]) r15 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000440)="0b2050707ab312f12b5b2d5c1c6f02f72bdc95cc594b8cc0c7045d228f8fc46dfc", 0x21, 0xfffffffffffffffb) r16 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xffffffffffffffff, r17) r18 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r19, 0x0) keyctl$chown(0x4, r15, r19, r17) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r20, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r21 = socket(0x10, 0x800000000080002, 0x0) dup2(r21, r20) [ 709.240461][T23579] attempt to access beyond end of device [ 709.250061][T23579] loop2: rw=2049, want=80, limit=63 [ 709.255375][T23579] attempt to access beyond end of device [ 709.271492][T23579] loop2: rw=2049, want=81, limit=63 17:49:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc020565d, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 709.325235][T23579] attempt to access beyond end of device [ 709.394175][T23579] loop2: rw=2049, want=130, limit=63 17:49:59 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x19, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 709.428045][T23579] attempt to access beyond end of device [ 709.462089][T23579] loop2: rw=2049, want=131, limit=63 [ 709.483852][T23579] attempt to access beyond end of device [ 709.539548][T23579] loop2: rw=2049, want=132, limit=63 [ 709.555476][T23579] attempt to access beyond end of device [ 709.592717][T23579] loop2: rw=2049, want=133, limit=63 [ 709.673761][T23579] attempt to access beyond end of device [ 709.683937][T23579] loop2: rw=2049, want=142, limit=63 [ 709.694918][T23579] attempt to access beyond end of device [ 709.707317][T23579] loop2: rw=2049, want=143, limit=63 [ 709.720446][T23579] attempt to access beyond end of device [ 709.727170][T23579] loop2: rw=2049, want=144, limit=63 [ 709.761811][T23579] attempt to access beyond end of device [ 709.771951][T23579] loop2: rw=2049, want=145, limit=63 [ 709.780931][ T27] audit: type=1804 audit(1581788999.584:331): pid=23607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1092/file0/bus" dev="loop2" ino=197 res=1 [ 709.824923][ T27] audit: type=1804 audit(1581788999.584:332): pid=23641 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1092/file0/bus" dev="loop2" ino=197 res=1 [ 709.850036][ T27] audit: type=1804 audit(1581788999.614:333): pid=23642 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1092/file0/bus" dev="loop2" ino=197 res=1 17:49:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x3, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:49:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x8001, @local, 0xfffffff7}, {0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, [], 0x1f}, 0x2}, 0x3ff, [0x2, 0xa46, 0xc338, 0x7, 0x0, 0xb8, 0x2, 0x9]}, 0x5c) dup2(r1, r0) 17:49:59 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469953d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:49:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x32345, 0x80) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="4ca539dc1e1eb0874cc50fe29e30b218028b9864b513d12d5576d9cf170938494fc510f505b0bbd14dd7c6de8e09a2106364a78051fcfe9b9b643032edba524ddc3637684e06bb04eabb270ace1022b9adc0aa288536007d", 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x1a, 0x6, 0x0) dup2(r2, r0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0xa10000, 0x3, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9e0902, 0x7fffffff, [], @ptr}}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x24800, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000180)={0x44a, 0x1, 0xff, 0x3, 0xffff8000, 0x3, 0x3f}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x3b, @remote, 0x4e21, 0x1, 'wrr\x00', 0x1, 0xa37a, 0x3f}, 0x2c) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = socket(0x25, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0x39, 0x8, 0x0, 0x2, 0x4, 0x6, 0x9, 0x7, 0x3, 0x8, 0x3, 0x0, 0x0, 0x101, 0x2, 0x2, {0x0, 0x7ff}, 0x5, 0x80}}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xffffffffffffffff, r11) lchown(&(0x7f00000001c0)='./file0\x00', r9, r11) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000100)={0x3, @null, r9}) 17:49:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205667, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:59 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1a, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 710.025993][T23656] overlayfs: unrecognized mount option "lowerdi•=./bus" or missing value 17:49:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:49:59 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 710.116861][ T27] audit: type=1804 audit(1581788999.914:334): pid=23666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1093/bus" dev="sda1" ino=16738 res=1 [ 710.126934][T23671] overlayfs: unrecognized mount option "lowerdi•=./bus" or missing value [ 710.160456][T23666] attempt to access beyond end of device [ 710.198446][T23666] loop2: rw=2049, want=78, limit=63 17:50:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 710.219658][T23666] attempt to access beyond end of device [ 710.225349][T23666] loop2: rw=2049, want=79, limit=63 [ 710.231002][T23666] attempt to access beyond end of device [ 710.236701][T23666] loop2: rw=2049, want=80, limit=63 [ 710.248630][T23666] attempt to access beyond end of device [ 710.255294][T23666] loop2: rw=2049, want=81, limit=63 [ 710.266957][T23666] attempt to access beyond end of device [ 710.284349][T23666] loop2: rw=2049, want=130, limit=63 [ 710.290490][T23666] attempt to access beyond end of device [ 710.296206][T23666] loop2: rw=2049, want=131, limit=63 [ 710.304568][T23666] attempt to access beyond end of device [ 710.316092][T23666] loop2: rw=2049, want=132, limit=63 17:50:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) socket(0x10, 0x800000000080002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0xfff, 0x96, 0x4}, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r0) [ 710.349933][T23666] attempt to access beyond end of device [ 710.385653][T23666] loop2: rw=2049, want=133, limit=63 17:50:00 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1b, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:50:00 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 710.426980][T23666] attempt to access beyond end of device [ 710.453958][T23666] loop2: rw=2049, want=142, limit=63 [ 710.486280][T23666] attempt to access beyond end of device [ 710.521565][T23666] loop2: rw=2049, want=143, limit=63 [ 710.549619][T23666] attempt to access beyond end of device [ 710.572303][T23699] overlayfs: failed to resolve './file0': -2 [ 710.581134][T23666] loop2: rw=2049, want=144, limit=63 [ 710.604828][T23666] attempt to access beyond end of device [ 710.616187][T23666] loop2: rw=2049, want=145, limit=63 [ 710.638030][T23666] attempt to access beyond end of device [ 710.662737][T23666] loop2: rw=2049, want=153, limit=63 [ 710.694445][T23680] attempt to access beyond end of device [ 710.724601][T23680] loop2: rw=2049, want=78, limit=63 [ 710.778600][T23680] attempt to access beyond end of device [ 710.800576][T23680] loop2: rw=2049, want=79, limit=63 [ 710.805817][T23680] attempt to access beyond end of device [ 710.827560][T23680] loop2: rw=2049, want=80, limit=63 [ 710.833208][T23680] attempt to access beyond end of device [ 710.839274][T23680] loop2: rw=2049, want=81, limit=63 [ 710.844527][T23680] attempt to access beyond end of device [ 710.850548][T23680] loop2: rw=2049, want=130, limit=63 [ 710.855965][T23680] attempt to access beyond end of device [ 710.868620][T23680] loop2: rw=2049, want=131, limit=63 [ 710.873930][T23680] attempt to access beyond end of device [ 710.882669][T23680] loop2: rw=2049, want=132, limit=63 [ 710.888273][T23680] attempt to access beyond end of device [ 710.894905][T23680] loop2: rw=2049, want=133, limit=63 [ 710.900950][T23680] attempt to access beyond end of device [ 710.906590][T23680] loop2: rw=2049, want=142, limit=63 [ 710.912251][T23680] attempt to access beyond end of device [ 710.917968][T23680] loop2: rw=2049, want=143, limit=63 [ 710.924211][T23680] attempt to access beyond end of device [ 710.931318][T23680] loop2: rw=2049, want=144, limit=63 [ 710.936647][T23680] attempt to access beyond end of device [ 710.942576][T23680] loop2: rw=2049, want=145, limit=63 [ 710.950017][T23683] attempt to access beyond end of device [ 710.955656][T23683] loop2: rw=2049, want=177, limit=63 [ 710.961476][ T27] audit: type=1804 audit(1581789000.764:335): pid=23666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1093/file0/bus" dev="loop2" ino=198 res=1 17:50:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x4, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9e0000, 0x9, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9e0902, 0x0, [], @value=0x1f}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e20, @rand_addr=0x5}}, 0x0, 0x0, 0x49, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x9224) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r0) 17:50:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$FICLONE(r0, 0x40049409, r2) dup2(r1, r0) 17:50:00 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:00 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f000051b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000014b000/0x1000)=nil) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f77658050b614021f7b2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726400000000000000004caa8800eaf8ffffffffffffff8869f57b616f000000f1fbc036200000000000000000"]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:50:00 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x20000544, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) 17:50:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000000)={'veth0\x00', 0x400}) dup2(r1, r0) 17:50:01 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0505609, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:01 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726b6469726dda050c9c68a008070b53f73277374c2e2f66696c65332c75707065724a69723d2e2f6679"]) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/183) close(r2) 17:50:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xe3e6) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 711.441675][ T27] audit: type=1804 audit(1581789001.244:336): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1094/bus" dev="sda1" ino=16658 res=1 17:50:01 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x7ffffffff000, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0}, 0x20) [ 711.589707][T23740] attempt to access beyond end of device [ 711.617410][T23740] loop2: rw=2049, want=78, limit=63 17:50:01 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc050560f, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 711.633094][T23755] overlayfs: unrecognized mount option "lowerkdirmÚ œh  S÷2w7L./file3" or missing value [ 711.655149][T23740] buffer_io_error: 73 callbacks suppressed [ 711.655160][T23740] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 711.773536][T23740] attempt to access beyond end of device [ 711.803845][T23740] loop2: rw=2049, want=79, limit=63 [ 711.834969][T23740] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 711.855495][T23740] attempt to access beyond end of device [ 711.905071][T23740] loop2: rw=2049, want=80, limit=63 [ 711.924930][T23740] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 711.936117][T23740] attempt to access beyond end of device [ 711.941848][T23740] loop2: rw=2049, want=81, limit=63 [ 711.958698][T23740] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 711.967158][T23740] attempt to access beyond end of device [ 711.997092][T23740] loop2: rw=2049, want=130, limit=63 [ 712.002446][T23740] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 712.011101][T23740] attempt to access beyond end of device [ 712.016746][T23740] loop2: rw=2049, want=131, limit=63 [ 712.022242][T23740] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 712.030838][T23740] attempt to access beyond end of device [ 712.036463][T23740] loop2: rw=2049, want=132, limit=63 [ 712.041780][T23740] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 712.050337][T23740] attempt to access beyond end of device [ 712.055950][T23740] loop2: rw=2049, want=133, limit=63 [ 712.061403][T23740] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 712.069927][T23740] attempt to access beyond end of device [ 712.075593][T23740] loop2: rw=2049, want=142, limit=63 [ 712.080911][T23740] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 712.089442][T23740] attempt to access beyond end of device [ 712.102263][T23740] loop2: rw=2049, want=143, limit=63 [ 712.107588][T23740] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 712.116172][T23740] attempt to access beyond end of device [ 712.121864][T23740] loop2: rw=2049, want=144, limit=63 [ 712.127227][T23740] attempt to access beyond end of device [ 712.134548][T23740] loop2: rw=2049, want=145, limit=63 [ 712.141406][ T27] audit: type=1804 audit(1581789001.944:337): pid=23763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1094/file0/bus" dev="loop2" ino=199 res=1 [ 712.146709][T23760] attempt to access beyond end of device [ 712.166719][ T27] audit: type=1804 audit(1581789001.944:338): pid=23781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1094/file0/bus" dev="loop2" ino=199 res=1 [ 712.174585][T23760] loop2: rw=2049, want=177, limit=63 [ 712.196985][ T27] audit: type=1804 audit(1581789001.944:339): pid=23782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1094/file0/bus" dev="loop2" ino=199 res=1 [ 712.204763][T23760] attempt to access beyond end of device [ 712.232308][T23760] loop2: rw=2049, want=177, limit=63 17:50:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x6, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffeb5, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x8b20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4001, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x3f) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x7) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) dup2(r2, r1) 17:50:02 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0505611, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:02 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x2}, 0x20) 17:50:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000003780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001580)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000037c0)={0xb, 0x10, 0xfa00, {&(0x7f00000036c0), r4, 0x9}}, 0x18) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001440)=[{&(0x7f0000000080)={0x27, 0x1, 0x2, 0x0, 0x1, 0x0, "80c37f880284da1cc06a03f7327a11bc0e1f082676a3a991339976e50324876e4c529f9e801849de21480bdd42963edfd80874e33a23aa47307a834437bf45", 0x2f}, 0x60, &(0x7f0000000400)=[{&(0x7f0000000100)="30ee919e99e2b2e9c3299b94d0cee85662d38f9adad2eaebd7f1c1f14f88e7fc5f9bd338ac11d8d9d9124a0dfb2d93308ac40552c22d0871283628468a804b3c63dd71f4e0ee6736ddc039c7bd2479a0f0177849e9bbddc16055499fea1556f93e90f65375aee2181974efe497f80f5ebc284906092f5b53755d71587112bda56aeadddfd5d9b8ec7ff690e46849de690ceb457bbd27307eb1ff736447", 0x9d}, {&(0x7f00000001c0)="85403a856385df28d2df7f474a3ea97dbc1b2f74a67b71713baae2e143436deb1a51e42a449e0a9701ef45930e9107efa70fb00c997509afbde9ab325a21a72c4dab10c13a884344cfcb05b69bc1270711c6e1d2ff6048e1e8249ceff8f81b70f2ac26de", 0x64}, {&(0x7f0000000240)="d3b1acb383a0273ffab96bb94f622f3f7184cb52678618ddfbda5f5c4caa11aae22833bebb20ec156fce5e523ae9c526d7c02e266b134272c55433c275fd", 0x3e}, {&(0x7f0000000280)="61d304f1f0532395e3189434426db79cff3512c6669f548ccbdcf4f21f18486538790f777233b29f86eb8c2c481f16cf1c53a9a1c5c53238ce9bad43cb38728099f6f2925d571a5c8cef076465d5aadc7734ab76d8aca28b5f9c6b769459ab62cfdadf8769c0debd17bf1019f6e574f3ffbadb16958059bf468a94f050694fa91b69c18718b6796927af1a48ac0cdf631abf54b7462fa82d8adfca72b31a58cfc3650e477ede20cfb6174555ae2fef09409702c3115ca2f0cd3d21cb8c1f", 0xbe}, {&(0x7f0000000340)="3aca25309916747be5a5feced685bd5bb4308e9f619243f2ece5cb0c714e4898fa6ffcf8bab153e0dd84e3baf7644a80a84b079a4235214c11f59119c1ce9abafa52d1b244bcf6098bf208d482d3f8a4c7b08b156ef0548474b72d17f4577ac69ac9e3944ef6b75f5a76cec509032057f96b5fff5930123b5a23383d21f8efe26760a5ce59f5bcfcd4ee6f70d3aa9ab7c13c7d13a8947e39fe", 0x99}], 0x5, 0x0, 0x0, 0x40}, {&(0x7f0000000480)={0x27, 0x1, 0x2, 0x7, 0x6, 0x20, "ee9f720ea5df15e890919d1fabbdc5078cc1329ad65be454048eef2164f95f59aaa3bc012498b519d05a8799e39809ce37c9554b8543a510f09da9db8e58c1", 0x5}, 0x60, &(0x7f0000000840)=[{&(0x7f0000000500)="fe9198357b1c0e689d8430c55f10e99cd96e87ada1473e1fa7503952a3f87f4115210b31432dc91da0e6fffff19fbe6cfd3b3315865ee7c8c14946e72ee3f4f262a3b6bf56e9", 0x46}, {&(0x7f0000000580)="b5aea2306948ca125584a4584b51b35569a9bf3ec4195d5766db45180250fb7249d016bca621e070eb2b5315b58b4b15c9fe718e940cfe64f8b81e09d374e7411e49efbf49ebe2fc920b6dbbb22dd0363e7796ce3225550a6a0bbdaf776209efde186e97ca056d7ad75284c78fedfd505f3f07da3a5aa5dda71be1118f643740ddadb195d35cd6912b56bcf91f1f8ab532e8d35b69f3c5cc41719305207c68a3b0f7518446efe0454567e4aebe331529425b642109938e4f81577bc3d675cc5a7a20e99fed013196a7ac01f70334", 0xce}, {&(0x7f0000000680)="abdfe0a7bcf67c", 0x7}, {&(0x7f00000006c0)="01588d6dc8d4db181d15ab9999e4e4703f8baba83d709c1644464dee5b077ccb184970436ab1178408f970144fed3cf18a7b19e3e0433094472f381f4fd0b139d4e6ebb24598", 0x46}, {&(0x7f0000000740)="0ad08bab9fffd6b414fa0aacc62aae9b9f611844ba6cd49f1c4fcd80361610661faececdffb2b271da85b8a33728d5e2c71e6eb5f436d31e47c89cc18ac3eb4efb4a1aad8430a687930cb100a63e72e566900f709a2f4cef268f472e639b9a2a12787b9dcd898342b65ebe2cfcda829f05442f802ce318f97732c81e336ce6b743bcc1d255de22906fbccdb63653cf38d97861fb51fd7f5f785cf3ce46916977a7d16b8dde", 0xa5}, {&(0x7f0000000800)="36e51aac7062b07a3d0cadee5cae39c32a9d0b1fc65bb06dd0c9", 0x1a}], 0x6, &(0x7f00000008c0)={0x100, 0x1, 0x1, "ab73a4af8f32a3b31c3a95d631ebe3818db4ed22dc471cef3caa644a2b1dc9bd1535d0406fa5e823b80d98e4b76810088fa431cc118dd77e5280130692037feafe8e244be6acb7d043047e329bf0acc51c4e5a0c5f5378d0f23386e41017c71d44f45b12107284bf099cbba3546d52da593e2a9131c43a988e1e6ffb1d056b4a02b06759a18188c949a8d88e7efbd1bdfa19064600fb9cee44017b72a5102dd4292e3711dd7455ec9356b69ea0dc76ec99cc8be840c18c9a9ecb2648690795ca3a18dd98c62cdd138d9af378ababcea5ea993d46f3394dd5c40f4c76ac530e4d6ba3d24cae13a9bffbd57f6d26"}, 0x100, 0x810}, {&(0x7f00000009c0)={0x27, 0x0, 0x1, 0x3, 0xff, 0x5, "61da6eaa00734748a297477c715e9e98b3132030a4a53eb25d023701d71752ea1abb425cc6bf13f0e9376127484d161d80ab0d81ce67df9807133abee5cb91", 0x34}, 0x60, &(0x7f0000000a40)=[{&(0x7f00000016c0)="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", 0x1000}], 0x1, &(0x7f0000000a80)={0xd8, 0x0, 0x9, "2d755ca3bd4dd9f93431fe822ee662d4333921d703e4a6070cc691979b35732a82b33d248ebaebb6ec6f071086eb72a551a23ec78104a004f1bdf6b0fdbe93215977aa4e09b3446531a6c2babeeb36692e7b76f26cf8acbb63c63053c3d493975e06bb330a0af8d5d6dbec2971d6c48d74c8f4c8ee0a41bc985c003f8dacc03d3f23b20874d7bcd98d08656509d587628d8c9b96ffb5b30375d1ac25d032c59c695c0f7504f50b31eca03d27a827121159fce84989f5c0917ec04404dd1ea5788a271b"}, 0xd8, 0x20000401}, {&(0x7f0000000b80)={0x27, 0x0, 0x1, 0x7, 0x40, 0x6, "b730ea90b8271d02715df9b80d1497f2740009814f8fea695d4b8e6bbe2ffc20c974be0d62a58ea717f3bc241b76c258c3522a73c09f00093f7facaef3760c", 0x30}, 0x60, &(0x7f0000000f40)=[{&(0x7f0000000c00)="3bf6aeb31fabf2eefeee0c399d34f6047b365ebe4df30cec5e405a547b4c7bda989c189335955a95cc1911c54979cb26e3746fa8aee1c99cc39c8db5221e222e01f52217a23d92cc2691e9ed0c93a37b7d8ccf29719b67b96377b343", 0x5c}, {&(0x7f0000000c80)="0864e384036926687dc8be4ab2481f5e0e2c95387d93ecf8d840e6cf1bb1c2b3de7a6b1f01286cf2c2f8ebe14a6e69c0f87e8cc1a67d8358aaa895021fb7cc652aec84f5d44c476b48d2a791f429ce5c82ce0e7302e80bb2e0b04d76fe9e352480441dd1937938d12006e97d076d69e86426aa668f265a1377a139f8e660acebd2e6d431beb8fa3a482ac891137449e61fee9c278d74949238b106a3569600e9a01ca69f0bfed9486ec2ae22050efdc4cdd572c5", 0xb4}, {&(0x7f0000000d40)="9694f12c13540c4bf8247ad7da1b0c27ec411e5cc2893bde20ae14ba731b78db9c675c5eb1adfabca34eda2099fe629a97b50bcbad13a094c374d03fbda41b4242838a1c42e7aca0b4fdf327dbd9ddb50198602631722f65a1e383dad6f1fb16e2cb43f9120e86dbb6bd15e8c842878cc2cfb32c1041f2754f28a66f340e0b69288b1ef92a6ef62fa6ff1c3194357d395ce5b30efb0bf43e2ff3b7881af48aff4be11a7fcc6227ef6ac6dfde8478f7f33c9f80ed751f26b1467d7d2d665a8939c950e14bee5b2613e2738b427334060527be76faa0ebfb7b54c76118ca71ef111105996b045a8ec91862", 0xea}, {&(0x7f0000000e40)="cbe5954b9ee460954372bb60b664267f573ce86a01", 0x15}, {&(0x7f0000000e80)="946308b6d2e26c6439cf016ce523db95719f9bb6b65376f8a390cb344ee7ac03d97cf7023c24d613376ea34f5c065c67f02da76b97c5e6ca9cdcba7027a4d29050f684f1ff6a7ef2dc4f0e3140719655e01ba2a52f3451e628cceaa25fd8bb7badbeaa403a809c6e0b8656abaee555be5b8752029931859077245028866c40e2335f14a4501dc886d64c9e364e1d08e637019aab238bec5b06d1e4f3c05c66512943a94694d73c8c831bf37d139f643115", 0xb1}], 0x5, 0x0, 0x0, 0x8000}, {&(0x7f0000000fc0)={0x27, 0x1, 0x2, 0x2, 0x7, 0xcb, "b75eb0d053781957b861a5414c56ed16b85b59e4ac2a602e28eb4ce6711a70fed69875fbec5a5e3378963ca5d336b9f88f0e0971eb14e71ffd4b6cdd7c48fc", 0x15}, 0x60, &(0x7f0000001380)=[{&(0x7f0000001040)="8a8534b09eca135f1779c077236217f1d94c6487cb01db0063aab2fdf11648873d64f2c875242933d5c7d89f4eba51c6712f4ceac6e6a2226d85eb622b13c61f070e6df34fb92bc0bb9b44b68bdf5854f5f3b7e6e623bd070c9602b9172ba1dcbaca84f311bc0633511a5483c722897490db6ca2198e22c16a5fef92d8b6979e4b67c538bbd27c53e68ed9808ee48dca6ead2d889afdbec10db173b8f1", 0x9d}, {&(0x7f0000001100)="7f245ae3a427c07fa99791fb9c310236301dab", 0x13}, {&(0x7f0000001140)="071abc66318c8c6be628929482652b144464de4f840e95e7545cc9664b7716033c7463798d871d93b12cc4f59268f21337f6e9627a85e5bf13b9d23a904332595feabcd96f0e32e0bff71ff07c0290bba1ef07c007be717252cfb555f624c2afcfaccb1cd44e413bc5be5fef174a1d179fc061f8ed24b951cdacadbdbc2eb1e025bf13865b3ba8048d3333d6691cec32ccc6fe02f78afee1c91a96ffb2fdbe8408136dbf74c0ae8e1c7d2b082a268a3680c4637487306083c267c2856660ae82e3aa06e16b4a07b921f3f283b7bcb14acf9357c03f0a357de5cbf0328f91225d32550e613b972ace1f0d66dcb8b4de", 0xef}, {&(0x7f0000001240)="17cb0dfb0af3d17499109b7f34ccad2cbf8bcaf01040821fffb7f3f7d82f3d2422a39e3226378f7215ed9a54491ed5a1cb2f78c7b7dc7b2b9856ea676a9317dcd9948e0f0d1b2a0d44200cf759be90be46f2885c5f7580fc5601c957c02e1c9bac523635f53e41bf4408e13461418bf5672117c01f16b39f26a26bae7f1c937bd72b4afd3a8e2236d9d0edeee292128c1bbf2c65bbf5f6a0e367b64b3dba5110d3fba6", 0xa3}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f0000001300)="c9fed55fd63739c208aaebbaad0f12bebb6d8788d01a9df2234191c847c9d7ac07ee715b487f2d456631e39822070f5f04252703e01b0c5530c990dc639439253c0aabf99e76b0d05108e1672ec5aa95668a4ae97409256e7f2844a3eda78328", 0x60}], 0x6, &(0x7f0000001400)={0x10, 0x10d, 0x4}, 0x10, 0x4000000}], 0x5, 0x40) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x2) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000040)=""/50) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) 17:50:02 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 712.393316][T23786] overlayfs: failed to resolve './file1': -2 17:50:02 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc050565d, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14800801}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4080) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) r4 = socket(0x10, 0x800000000080002, 0x0) close(r0) dup2(r4, r0) [ 712.498419][T23799] overlayfs: failed to resolve './file1': -2 17:50:02 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000440)={0x7fffffff, 0x4}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) [ 712.641694][T23802] attempt to access beyond end of device [ 712.647471][T23802] loop2: rw=2049, want=78, limit=63 [ 712.652766][T23802] attempt to access beyond end of device [ 712.658739][T23802] loop2: rw=2049, want=79, limit=63 [ 712.664122][T23802] attempt to access beyond end of device [ 712.669828][T23802] loop2: rw=2049, want=80, limit=63 [ 712.675087][T23802] attempt to access beyond end of device [ 712.680834][T23802] loop2: rw=2049, want=81, limit=63 [ 712.686259][T23802] attempt to access beyond end of device [ 712.692225][T23802] loop2: rw=2049, want=130, limit=63 [ 712.698060][T23802] attempt to access beyond end of device [ 712.703833][T23802] loop2: rw=2049, want=131, limit=63 [ 712.709310][T23802] attempt to access beyond end of device [ 712.717630][T23802] loop2: rw=2049, want=132, limit=63 [ 712.723082][T23802] attempt to access beyond end of device [ 712.728786][T23802] loop2: rw=2049, want=133, limit=63 [ 712.734101][T23802] attempt to access beyond end of device 17:50:02 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x4000}, 0x20) [ 712.739836][T23802] loop2: rw=2049, want=142, limit=63 [ 712.745386][T23802] attempt to access beyond end of device [ 712.752980][T23802] loop2: rw=2049, want=143, limit=63 [ 712.758356][T23802] attempt to access beyond end of device [ 712.764222][T23802] loop2: rw=2049, want=144, limit=63 [ 712.769644][T23802] attempt to access beyond end of device [ 712.775334][T23802] loop2: rw=2049, want=145, limit=63 17:50:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 712.795604][T23802] attempt to access beyond end of device [ 712.827334][T23802] loop2: rw=2049, want=153, limit=63 [ 712.839022][T23814] attempt to access beyond end of device [ 712.871827][T23814] loop2: rw=2049, want=78, limit=63 [ 712.895396][T23814] attempt to access beyond end of device [ 712.914382][T23814] loop2: rw=2049, want=79, limit=63 17:50:02 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 712.939438][T23814] attempt to access beyond end of device [ 712.951830][T23814] loop2: rw=2049, want=80, limit=63 [ 712.968185][T23814] attempt to access beyond end of device [ 712.999693][T23814] loop2: rw=2049, want=81, limit=63 [ 713.011853][T23831] overlayfs: failed to resolve './file0': -2 [ 713.030859][T23814] attempt to access beyond end of device [ 713.061884][T23814] loop2: rw=2049, want=130, limit=63 [ 713.078767][T23814] attempt to access beyond end of device [ 713.093485][T23814] loop2: rw=2049, want=131, limit=63 [ 713.116393][T23814] attempt to access beyond end of device [ 713.160096][T23814] loop2: rw=2049, want=132, limit=63 [ 713.165414][T23814] attempt to access beyond end of device [ 713.173045][T23814] loop2: rw=2049, want=133, limit=63 [ 713.178446][T23814] attempt to access beyond end of device [ 713.192419][T23814] loop2: rw=2049, want=142, limit=63 [ 713.199636][T23814] attempt to access beyond end of device [ 713.212026][T23814] loop2: rw=2049, want=143, limit=63 [ 713.217394][T23814] attempt to access beyond end of device [ 713.242976][T23814] loop2: rw=2049, want=144, limit=63 [ 713.248451][T23814] attempt to access beyond end of device [ 713.258296][T23814] loop2: rw=2049, want=145, limit=63 [ 713.302479][T23814] attempt to access beyond end of device [ 713.308182][T23814] loop2: rw=2049, want=245, limit=63 [ 713.313903][T23814] attempt to access beyond end of device [ 713.319644][T23814] loop2: rw=2049, want=245, limit=63 17:50:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x8, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:03 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x1, 'team_slave_0\x00', {}, 0x7fff}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r3) 17:50:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fffffb, 0x0, @perf_config_ext={0x0, 0x5db}, 0x509, 0xffffffffffffff79, 0x0, 0xb, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:50:03 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r2) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r2) add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000b00)="31b1b6a72c55a5caf89b26e411bd34e3f7f15261348bd749991484864e096f3ce07a6ad5882e4930dc87e4ce50b8c7affab7834342f7d9a4df84c6b520a884ae758d3fefd1e428978e19132c0fb4ed5a4d20bf384977c28612549708726673f11174f64d46ffebf4e2a1767d7a4fd867448298c3e7a7e21d72b0134996cbb5ab748de50d7dbdbdb164b560c24e62b31c", 0x5a, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='pkcs7_test\x00', 0x0) 17:50:03 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x60ff}, 0x20) 17:50:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) dup2(r1, r0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) 17:50:03 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) dup2(r1, r0) 17:50:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x3, 0x1, [], &(0x7f0000000000)=0x1}) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r1) [ 713.737230][T23883] overlayfs: filesystem on './file0' not supported as upperdir 17:50:03 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000800)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000080)) preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000040)={0x0, 0x4, 0x3, [], &(0x7f0000000000)=0x9}) dup2(r2, r1) 17:50:03 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x7700}, 0x20) [ 713.864609][T23873] attempt to access beyond end of device [ 713.920136][T23873] loop2: rw=2049, want=78, limit=63 [ 713.948320][T23873] attempt to access beyond end of device [ 713.982038][T23873] loop2: rw=2049, want=79, limit=63 [ 714.008740][T23873] attempt to access beyond end of device [ 714.039179][T23873] loop2: rw=2049, want=80, limit=63 [ 714.076579][T23873] attempt to access beyond end of device [ 714.128294][T23873] loop2: rw=2049, want=81, limit=63 [ 714.134293][T23873] attempt to access beyond end of device [ 714.140169][T23873] loop2: rw=2049, want=130, limit=63 [ 714.145546][T23873] attempt to access beyond end of device [ 714.152766][T23873] loop2: rw=2049, want=131, limit=63 [ 714.158140][T23873] attempt to access beyond end of device [ 714.163938][T23873] loop2: rw=2049, want=132, limit=63 [ 714.169384][T23873] attempt to access beyond end of device [ 714.175084][T23873] loop2: rw=2049, want=133, limit=63 [ 714.180494][T23873] attempt to access beyond end of device [ 714.186276][T23873] loop2: rw=2049, want=142, limit=63 [ 714.191705][T23873] attempt to access beyond end of device [ 714.198382][T23873] loop2: rw=2049, want=143, limit=63 [ 714.210366][T23873] attempt to access beyond end of device [ 714.216011][T23873] loop2: rw=2049, want=144, limit=63 [ 714.221332][T23873] attempt to access beyond end of device [ 714.226955][T23873] loop2: rw=2049, want=145, limit=63 [ 714.232475][T23873] attempt to access beyond end of device [ 714.238265][T23873] loop2: rw=2049, want=153, limit=63 [ 714.244057][T23895] attempt to access beyond end of device [ 714.258818][T23895] loop2: rw=2049, want=78, limit=63 [ 714.264031][T23895] attempt to access beyond end of device [ 714.269717][T23895] loop2: rw=2049, want=79, limit=63 [ 714.275005][T23895] attempt to access beyond end of device [ 714.280687][T23895] loop2: rw=2049, want=80, limit=63 [ 714.286100][T23895] attempt to access beyond end of device [ 714.292736][T23895] loop2: rw=2049, want=81, limit=63 [ 714.311561][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 714.311585][ T27] audit: type=1804 audit(1581789004.114:345): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1096/file0/bus" dev="loop2" ino=201 res=1 [ 714.354089][T23913] attempt to access beyond end of device [ 714.354917][ T27] audit: type=1804 audit(1581789004.154:346): pid=23897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1096/file0/bus" dev="loop2" ino=201 res=1 [ 714.360467][T23913] loop2: rw=2049, want=245, limit=63 [ 714.384903][ T27] audit: type=1804 audit(1581789004.154:347): pid=23895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1096/file0/bus" dev="loop2" ino=201 res=1 17:50:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0xa, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:04 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0xb700}, 0x20) 17:50:04 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xfffff7ffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) r3 = dup2(r2, r1) tee(r3, r2, 0x9, 0x3) 17:50:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4140, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x100}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x20}, &(0x7f0000000100)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r2) 17:50:04 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r4, 0xd2, 0x0, 0x800, 0x6}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0xd4, 0xe, 0x35, 0xffff, r4}, 0x10) 17:50:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:50:04 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0d05605, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() r2 = gettid() r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) kcmp(r1, r2, 0x2, r3, r4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x421201, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000000)=0x3ff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r7 = socket(0x10, 0x800000000080002, 0x0) dup2(r7, r0) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)={0x0, 0x7ff, 0x1f, &(0x7f0000000100)=0xff}) [ 714.741458][T23936] overlayfs: filesystem on './file0' not supported as upperdir 17:50:04 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 714.807956][ T27] audit: type=1804 audit(1581789004.604:348): pid=23932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1097/bus" dev="sda1" ino=16868 res=1 17:50:04 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x107200}, 0x20) [ 714.872205][T23932] attempt to access beyond end of device [ 714.904739][T23932] loop2: rw=2049, want=78, limit=63 [ 714.928114][T23932] attempt to access beyond end of device [ 714.950967][T23932] loop2: rw=2049, want=79, limit=63 17:50:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) [ 714.977955][T23932] attempt to access beyond end of device [ 715.015372][T23932] loop2: rw=2049, want=80, limit=63 [ 715.043262][T23932] attempt to access beyond end of device [ 715.071957][T23932] loop2: rw=2049, want=81, limit=63 [ 715.095320][T23932] attempt to access beyond end of device [ 715.111177][T23932] loop2: rw=2049, want=130, limit=63 [ 715.146136][T23932] attempt to access beyond end of device [ 715.172897][T23932] loop2: rw=2049, want=131, limit=63 [ 715.204750][T23932] attempt to access beyond end of device [ 715.213632][T23932] loop2: rw=2049, want=132, limit=63 [ 715.219838][T23932] attempt to access beyond end of device [ 715.225763][T23932] loop2: rw=2049, want=133, limit=63 [ 715.233890][T23932] attempt to access beyond end of device [ 715.265237][T23932] loop2: rw=2049, want=142, limit=63 [ 715.287888][T23932] attempt to access beyond end of device [ 715.310384][T23932] loop2: rw=2049, want=143, limit=63 [ 715.315812][T23932] attempt to access beyond end of device [ 715.321919][T23932] loop2: rw=2049, want=144, limit=63 [ 715.327340][T23932] attempt to access beyond end of device [ 715.333658][T23932] loop2: rw=2049, want=145, limit=63 [ 715.339305][T23932] attempt to access beyond end of device [ 715.345074][T23932] loop2: rw=2049, want=153, limit=63 [ 715.351015][T23952] attempt to access beyond end of device [ 715.358291][T23952] loop2: rw=2049, want=78, limit=63 [ 715.363991][T23952] attempt to access beyond end of device [ 715.369902][T23952] loop2: rw=2049, want=79, limit=63 [ 715.375604][T23952] attempt to access beyond end of device [ 715.381409][T23952] loop2: rw=2049, want=80, limit=63 [ 715.386645][T23952] attempt to access beyond end of device [ 715.392311][T23952] loop2: rw=2049, want=81, limit=63 [ 715.406021][ T27] audit: type=1804 audit(1581789005.204:349): pid=23932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1097/file0/bus" dev="loop2" ino=202 res=1 [ 715.413653][T23952] attempt to access beyond end of device [ 715.438636][T23952] loop2: rw=2049, want=245, limit=63 [ 715.445069][T23952] attempt to access beyond end of device [ 715.452543][T23952] loop2: rw=2049, want=245, limit=63 [ 715.454023][ T27] audit: type=1804 audit(1581789005.214:350): pid=23932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1097/file0/bus" dev="loop2" ino=202 res=1 [ 715.482443][ T27] audit: type=1804 audit(1581789005.214:351): pid=23952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1097/file0/bus" dev="loop2" ino=202 res=1 17:50:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0xc, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:05 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000240)={0x5d, &(0x7f0000000180)=""/93}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f77657264f09a1069723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f6669"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x3100) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r3) 17:50:05 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x400000}, 0x20) 17:50:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:05 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'veth1_macvtap\x00', {0x2, 0x4e22, @empty}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r1) 17:50:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x80000000, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb0917a4b89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/arp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000001000137564703a73797a32000000009426e4037218aba1c9d2a9fef701000000d7ba4ebcb55258366db643981ac38f6e34e299652c2175331fa3020795d8f68687a9422143747c33fbad0c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x8890) r6 = socket(0x10, 0x800000000080002, 0x0) dup2(r6, r0) [ 715.631033][T23984] QAT: Invalid ioctl [ 715.665348][T23984] QAT: Invalid ioctl 17:50:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000000)={0x5, 0x3, [0x101, 0x0, 0xf, 0x174, 0x6], 0x8000}) 17:50:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 715.723136][T23986] overlayfs: unrecognized mount option "lowerdðšir=./bus" or missing value 17:50:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001100)={0x1, &(0x7f0000000000)=""/4096, &(0x7f00000010c0)=[{0x10000, 0xac, 0xcaaa, &(0x7f0000001000)=""/172}]}) [ 715.792485][ T27] audit: type=1804 audit(1581789005.594:352): pid=23996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1098/bus" dev="sda1" ino=16933 res=1 [ 715.825206][T23996] attempt to access beyond end of device 17:50:05 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x519000}, 0x20) [ 715.862874][T23996] loop2: rw=2049, want=78, limit=63 [ 715.914585][T23996] attempt to access beyond end of device [ 715.949239][T23996] loop2: rw=2049, want=79, limit=63 17:50:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x9, 0x4da3, 0xffff, 0x1e5e, 0x4, 0x8}) [ 715.966027][T24008] overlayfs: unrecognized mount option "lowerdðšir=./bus" or missing value [ 715.989794][T23996] attempt to access beyond end of device [ 716.002088][T23996] loop2: rw=2049, want=80, limit=63 17:50:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 716.071651][T23996] attempt to access beyond end of device [ 716.077330][T23996] loop2: rw=2049, want=81, limit=63 [ 716.127168][T23996] attempt to access beyond end of device [ 716.208602][T23996] loop2: rw=2049, want=130, limit=63 [ 716.217238][T23996] attempt to access beyond end of device [ 716.227058][T23996] loop2: rw=2049, want=131, limit=63 [ 716.239690][T23996] attempt to access beyond end of device [ 716.263956][T23996] loop2: rw=2049, want=132, limit=63 [ 716.274866][T23996] attempt to access beyond end of device [ 716.281297][T23996] loop2: rw=2049, want=133, limit=63 [ 716.286750][T23996] attempt to access beyond end of device [ 716.293142][T23996] loop2: rw=2049, want=142, limit=63 [ 716.298847][T23996] attempt to access beyond end of device [ 716.306316][T23996] loop2: rw=2049, want=143, limit=63 [ 716.312100][T23996] attempt to access beyond end of device [ 716.319677][T23996] loop2: rw=2049, want=144, limit=63 [ 716.354375][T23996] attempt to access beyond end of device [ 716.362000][T23996] loop2: rw=2049, want=145, limit=63 [ 716.376253][T23996] attempt to access beyond end of device [ 716.382066][T23996] loop2: rw=2049, want=153, limit=63 [ 716.391712][T24007] attempt to access beyond end of device [ 716.397432][T24007] loop2: rw=2049, want=78, limit=63 [ 716.405171][T24007] attempt to access beyond end of device [ 716.411096][T24007] loop2: rw=2049, want=79, limit=63 [ 716.416306][T24007] attempt to access beyond end of device [ 716.422891][T24007] loop2: rw=2049, want=80, limit=63 [ 716.428165][T24007] attempt to access beyond end of device [ 716.434788][T24007] loop2: rw=2049, want=81, limit=63 [ 716.440391][T24007] attempt to access beyond end of device [ 716.446021][T24007] loop2: rw=2049, want=130, limit=63 [ 716.451383][T24007] attempt to access beyond end of device [ 716.457057][T24007] loop2: rw=2049, want=131, limit=63 [ 716.462500][T24007] attempt to access beyond end of device [ 716.468198][T24007] loop2: rw=2049, want=132, limit=63 [ 716.473522][T24007] attempt to access beyond end of device [ 716.479190][T24007] loop2: rw=2049, want=133, limit=63 [ 716.484512][T24007] attempt to access beyond end of device [ 716.490171][T24007] loop2: rw=2049, want=142, limit=63 [ 716.495499][T24007] attempt to access beyond end of device [ 716.501161][T24007] loop2: rw=2049, want=143, limit=63 [ 716.506465][T24007] attempt to access beyond end of device [ 716.522800][T24007] loop2: rw=2049, want=144, limit=63 [ 716.528106][T24007] attempt to access beyond end of device [ 716.533991][T24007] loop2: rw=2049, want=145, limit=63 [ 716.547099][ T27] audit: type=1804 audit(1581789006.344:353): pid=23996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1098/file0/bus" dev="loop2" ino=203 res=1 [ 716.549941][T24007] attempt to access beyond end of device [ 716.577832][ T27] audit: type=1804 audit(1581789006.344:354): pid=24024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1098/file0/bus" dev="loop2" ino=203 res=1 [ 716.578578][T24007] loop2: rw=2049, want=245, limit=63 [ 716.607884][T24015] attempt to access beyond end of device [ 716.613583][T24015] loop2: rw=2049, want=245, limit=63 17:50:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0xe, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:50:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f000063a000)=0x7fff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x60000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r2) 17:50:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:06 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:50:06 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x718000}, 0x20) 17:50:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 716.872392][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 17:50:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xa4211, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:50:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x7, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:50:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000040)="8e079c51015bc053ae08dcb7bea119482f2edc", 0x13) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r0) 17:50:07 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x721000}, 0x20) [ 717.176359][T24063] attempt to access beyond end of device [ 717.191444][T24063] loop2: rw=2049, want=78, limit=63 [ 717.196723][T24063] buffer_io_error: 82 callbacks suppressed [ 717.196734][T24063] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 717.285142][T24063] attempt to access beyond end of device [ 717.343829][T24063] loop2: rw=2049, want=79, limit=63 [ 717.369000][T24063] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 717.398651][T24063] attempt to access beyond end of device [ 717.427669][T24063] loop2: rw=2049, want=80, limit=63 [ 717.433361][T24063] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 717.444757][T24063] attempt to access beyond end of device [ 717.450715][T24063] loop2: rw=2049, want=81, limit=63 [ 717.455982][T24063] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 717.467273][T24063] attempt to access beyond end of device [ 717.475236][T24063] loop2: rw=2049, want=130, limit=63 [ 717.483944][T24063] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 717.502918][T24063] attempt to access beyond end of device [ 717.516427][T24063] loop2: rw=2049, want=131, limit=63 [ 717.524717][T24063] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 717.548626][T24063] attempt to access beyond end of device [ 717.561621][T24063] loop2: rw=2049, want=132, limit=63 [ 717.575250][T24063] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 717.584959][T24063] attempt to access beyond end of device [ 717.590802][T24063] loop2: rw=2049, want=133, limit=63 [ 717.596096][T24063] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 717.604965][T24063] attempt to access beyond end of device [ 717.611646][T24063] loop2: rw=2049, want=142, limit=63 [ 717.617302][T24063] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 717.626161][T24063] attempt to access beyond end of device [ 717.632044][T24063] loop2: rw=2049, want=143, limit=63 [ 717.637329][T24063] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 717.646395][T24063] attempt to access beyond end of device [ 717.652160][T24063] loop2: rw=2049, want=144, limit=63 [ 717.657525][T24063] attempt to access beyond end of device [ 717.663223][T24063] loop2: rw=2049, want=145, limit=63 [ 717.668907][T24063] attempt to access beyond end of device [ 717.674533][T24063] loop2: rw=2049, want=153, limit=63 [ 717.691883][T24085] attempt to access beyond end of device [ 717.697573][T24085] loop2: rw=2049, want=245, limit=63 [ 717.704185][T24085] attempt to access beyond end of device [ 717.709933][T24085] loop2: rw=2049, want=269, limit=63 17:50:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x10, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:07 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:07 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="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"]) r2 = socket(0x10, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) io_setup(0xff, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="100000000600"/16, 0x10}]) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f000000d180), 0x4000000000000eb, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001780)=""/154, 0x9a}, {&(0x7f0000001840)}], 0x2, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r8, &(0x7f000000d180), 0x0, 0x800) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x501000, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0x5, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r10, &(0x7f000000d180), 0x4000000000000eb, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f000000d180), 0x4000000000000eb, 0x0) pipe2(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r14 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r14, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r14, &(0x7f000000d180), 0x4000000000000eb, 0x0) io_submit(r4, 0x5, &(0x7f0000001640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r5, &(0x7f0000000440)="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", 0x1000, 0x56e, 0x0, 0x2, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x3, r7, &(0x7f0000000180)="87aa209f48c2d4b3d47c5a1f86335f702c89e8a6a584834c51c80e1b7c3a39f51f5b74b9c9bc3a93c5aec982c1492a4625adcd8f8915b13db1b25cb74e77df266b994a9a0f1b718e03ac169254e4fc65fef3caafe70682cf", 0x58, 0x7, 0x0, 0x2, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x20, r10, &(0x7f0000000340)="68b5ebfaf512d5624c4cd3d57396957cf4abceec467c7b6bee9158d3109fd7dbbdcdbf77148159b6072e9df2510cc962e0db43f7205a3a9b3427acaa9f5a32922ede1b423bd0fa9d34ea0e19bf214a86d98b7774b4db89f9b0e99f09e8a1ef68a39097d84f6cc947", 0x68, 0x0, 0x0, 0x1, r11}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0xe000, r12, &(0x7f0000001440)="fc653456f258329a738517112a4c82f463af1ef0e70f58bad7fcaa438dc0da3fdfac4a0d193c0d328852f382e80445432847643236478ff4d2ee90de694639b8db65d65a87cc9adec9f8103e1ae19f369715591919b0ea9300b8b6a1c42fa77e38b428b985cdf9b3b8cbebc50ac24d195ed9d066228c33c4c872e2285b16eebc259da8f0920e2f56d76868d2052db583f1a91f224e2fffcf034e751c995873e2914da52baf4abc05893a4cf393065f940bffd5926b555cd8e02217dfb1dfb2344bf8386f55391b0900643e110dead58d2918d2493f9b76b72284fbc1ea72", 0xde, 0x8, 0x0, 0x1, r13}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x4, r14, &(0x7f00000015c0)="f9970a8c4215480a43a78fd8e9ed28b67eb33063ec1dd1199fdd8647d84e", 0x1e, 0x9, 0x0, 0x1}]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r15, 0xee01, 0x0) getgroups(0x7, &(0x7f0000000080)=[0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0x0, 0x0, 0xee00]) setfsgid(r16) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001840)='memory.events\x00', 0x7a05, 0x1700) close(r17) 17:50:07 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x503000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone3(&(0x7f0000001240)={0x800000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x17}, &(0x7f00000001c0)=""/4096, 0x1000, &(0x7f00000011c0)=""/20, &(0x7f0000001200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r2) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="96b4c272c126", 'vlan0\x00'}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000012c0)={0x3, 'team_slave_1\x00', {0x1}, 0x7}) 17:50:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) iopl(0x5e) 17:50:07 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x770000}, 0x20) [ 717.840268][T24098] overlayfs: unrecognized mount option "lowerdiz=./bus" or missing value [ 717.916774][T24111] overlayfs: unrecognized mount option "lowerdiz=./bus" or missing value 17:50:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'syzkaller1\x00', {}, 0x8}) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r0) 17:50:07 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:07 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x807100}, 0x20) 17:50:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000000)={[0x3000, 0x3000, 0x3000, 0x5000], 0x1, 0xae, 0x4}) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x28000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x17}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008080) 17:50:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x10f, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:08 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RSTATFS(r3, &(0x7f0000000080)={0x43, 0x9, 0x1, {0xb1e1, 0x7, 0x7, 0x8, 0x10000, 0x8000, 0x7ff, 0xc69, 0x1}}, 0x43) close(r2) 17:50:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x30, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x0, 0x0, 0x3f, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r0) 17:50:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40030}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e24, 0x7fffffff, @remote, 0x8}}, 0x0, 0x0, 0x42, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r1 = socket(0x10, 0x800000000080002, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000000)) 17:50:08 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x905100}, 0x20) 17:50:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x300, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000180)=0x4f7, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0x990000, 0x3, 0x0, r0, 0x0, &(0x7f0000000000)={0x980922, 0x400, [], @value=0xfff}}) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r4 = socket(0x10, 0x800000000080002, 0x0) dup2(r4, r3) 17:50:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x500, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 718.873492][T24171] attempt to access beyond end of device [ 718.917346][T24171] loop2: rw=2049, want=78, limit=63 17:50:08 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0xfffffffffffffc1b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r5) [ 718.944298][T24171] attempt to access beyond end of device 17:50:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000080)={r5}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r6 = socket(0x10, 0x800000000080002, 0x0) dup2(r6, r0) [ 718.987834][T24171] loop2: rw=2049, want=79, limit=63 [ 719.032864][T24171] attempt to access beyond end of device [ 719.045785][T24171] loop2: rw=2049, want=80, limit=63 [ 719.055562][T24171] attempt to access beyond end of device [ 719.070221][T24171] loop2: rw=2049, want=81, limit=63 17:50:08 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0xb70000}, 0x20) 17:50:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x600, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 719.082587][T24171] attempt to access beyond end of device [ 719.101848][T24171] loop2: rw=2049, want=130, limit=63 [ 719.118016][T24171] attempt to access beyond end of device [ 719.165675][T24171] loop2: rw=2049, want=131, limit=63 [ 719.208585][T24171] attempt to access beyond end of device 17:50:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r0) socketpair(0x18, 0x46ecfcda14e774fa, 0x6, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x8a00, 0x0) r5 = getpgrp(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x4, 0x3}, r6, 0xffffffffffffffff, r7, 0x0) ptrace$setregs(0xd, r6, 0xfd7, &(0x7f0000000100)="24eb43e7f102c77a2a30595a8cbc32610868ce29982e930e209c87ed211955f71e43ee54aacecb7b90cffe2750ff86c7214aa7261229fcbc1afdf1b14f59160722cd189bbea47c576f576e8bbecf4ec46f8860337f84eff8d543277f86895137af58765b56cd96299d8cd139972e7cc5c5072dcdbb0d98447d62cb9ea174d854324b3098a73291eb08c6544a5c0ec7f2a0b6ef53620aab67e4e8c705cf4e71959050174d0f2af336") setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000002c0)=0x4, 0x4) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000080)=0x80) [ 719.264799][T24171] loop2: rw=2049, want=132, limit=63 [ 719.316615][T24171] attempt to access beyond end of device [ 719.362570][T24171] loop2: rw=2049, want=133, limit=63 [ 719.387239][T24171] attempt to access beyond end of device [ 719.393065][T24171] loop2: rw=2049, want=142, limit=63 [ 719.418972][T24171] attempt to access beyond end of device [ 719.445680][T24171] loop2: rw=2049, want=143, limit=63 [ 719.471577][T24171] attempt to access beyond end of device [ 719.501366][T24171] loop2: rw=2049, want=144, limit=63 [ 719.544940][T24171] attempt to access beyond end of device [ 719.555236][T24171] loop2: rw=2049, want=145, limit=63 [ 719.581696][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 719.581717][ T27] audit: type=1804 audit(1581789009.384:364): pid=24182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1101/file0/bus" dev="loop2" ino=205 res=1 [ 719.622301][T24223] attempt to access beyond end of device [ 719.634568][ T27] audit: type=1804 audit(1581789009.424:365): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1101/file0/bus" dev="loop2" ino=205 res=1 [ 719.645945][T24223] loop2: rw=2049, want=245, limit=63 [ 719.659663][ T27] audit: type=1804 audit(1581789009.434:366): pid=24187 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1101/file0/bus" dev="loop2" ino=205 res=1 17:50:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ftruncate(r1, 0x8200) fchdir(r0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) io_setup(0xab, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x6800, 0x300, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0) 17:50:09 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x700, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x588, 0x130, 0x380, 0x380, 0x0, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x3, 0x0, 0x0, [0xfe00, 0x6, 0x400, 0x0, 0x8, 0x0, 0x5, 0x8, 0x5, 0x200, 0x8001, 0x84, 0x4, 0x91, 0x43e, 0x4], 0x4}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x1fffc000, 0x0, 0x2, 0x2, 0x401, 0x1, 0xd9]}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @multicast1}, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xffffff00, 0x0, 0xffffff00], 'veth0_vlan\x00', 'ipvlan0\x00', {}, {}, 0x62, 0x20, 0x7}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}, @ipv4=@remote, @gre_key, @port=0x4e24}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0x39}, [0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0xff], 'bridge_slave_0\x00', 'sit0\x00', {0xff}, {0xff}, 0x4, 0x81, 0x2, 0x2}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, ']8'}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x0, 0x4, 0x1, [0x401, 0x7fff, 0x7, 0x9, 0xfffd, 0x1f, 0x8, 0x101, 0x401, 0x81, 0x100, 0x5, 0x1, 0x0, 0x1, 0x5]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@empty, @ipv6=@empty, @icmp_id=0x67, @gre_key=0x7ff}}}, {{@ipv6={@ipv4={[], [], @loopback}, @remote, [0xff000000, 0xff, 0xffffff00], [0xff, 0x19b675280c8dc23b, 0xffffff00, 0xffffff00], 'batadv0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x32, 0x7f, 0x2, 0x40}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x2, 0x7, 0x0, [0x7, 0x2, 0x1, 0x9, 0x5, 0x1, 0x9, 0x1, 0x14b3, 0xf0c1, 0xfff, 0x6, 0x0, 0x0, 0x4488, 0x1], 0x7}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@local, @icmp_id=0x68, @icmp_id=0x66}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) r1 = socket(0x10, 0x800000000080002, 0x0) dup2(r1, r0) 17:50:09 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0xfffff001, 0xf539, 0x2, 0x3f, 0xff, 0x0, 0x7f, 0x8, 0x7f, 0x20, 0x1, 0x3, 0x2040000}, {0x3ff, 0x5, 0x5, 0xdf, 0x8, 0xff, 0x40, 0x8, 0x1, 0x0, 0x80, 0x0, 0xfffffffffffff284}, {0x400, 0xe3, 0xf8, 0x5, 0x0, 0x8, 0x3, 0x1, 0x40, 0x9, 0x6c, 0xb2, 0xadb}], 0xc}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r2) 17:50:09 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x1000000}, 0x20) 17:50:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r2 = socket(0x10, 0x800000000080002, 0x0) dup2(r2, r0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) r5 = dup3(r3, r4, 0x80000) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000040)) [ 719.816702][T24232] x_tables: duplicate underflow at hook 1 [ 719.854640][T24238] x_tables: duplicate underflow at hook 1 17:50:09 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xff00, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) 17:50:09 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000000c0)={0x20, 0x3, 0xffffffffffffffb0, 0x80000000, 0xe72}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x40, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r2 = socket(0x5, 0x800000000080002, 0x0) r3 = dup2(r2, r1) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000040)=[0x5, 0x7]) [ 719.949531][T24236] overlayfs: filesystem on './file0' not supported as upperdir [ 720.076341][T24256] Unknown ioctl 15217 [ 720.082180][ T27] audit: type=1804 audit(1581789009.884:367): pid=24246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1102/bus" dev="sda1" ino=16882 res=1 17:50:09 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000540)="93", 0x0, 0x2000000}, 0x20) 17:50:10 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000340)) r3 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x1) fcntl$dupfd(r3, 0x406, r0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000380)=0x40, 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x21001, &(0x7f0000000440)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b64697238f59b64ac9a83562c75707065726469723d2e2f66696c6530c9b57afb1f3d82a9b7219c4189e0ea3a5c8166f3b2ac4e86f54aa75efb4cab5677dab8ff9da21678130603b50b9147150e8b787daf4c9a8a2b5897cd7858ce7d9946dc767060c8f05dfb8fbb60e2db509ec1705e53a9afc0024ce9"]) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x3, 0x6, 0xb07, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r6) [ 720.180917][T24246] attempt to access beyond end of device [ 720.193541][T24256] Unknown ioctl 15217 17:50:10 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8aa6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x1000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00902, 0x0, [], @string=0x0}}) [ 720.248942][T24246] loop2: rw=2049, want=78, limit=63 17:50:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x5001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x6, 0x2, @ipv4={[], [], @empty}, 0x6}}, 0x0, 0x0, 0x8, 0x0, "eb2b315df77aa14d47520837cec5cd3bfd6a9f1a90d0647797fb28181f8eacb8bc1e734cc6268cf8e79d5c79e4a7002c58153defb62ebf22d2941174e72c96ca31e1cca74641117983365356e4860927"}, 0xd8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x42, 0x0, "15053af6bc99b30249d7436a9fb091a03c89f4e6ede6aa85f1a2e18ca410ba483389fc091fcfdbae5d09402ce82834cf37d8e2463734a591d8e4157f5ec91d172a05e50d111387deeb7a913f5274ff84"}, 0xd8) r3 = socket(0x10, 0x800000000080002, 0x0) dup2(r3, r0) getrusage(0x1, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x74, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x2, @loopback}, @in6={0xa, 0x4e20, 0x1, @loopback, 0x10001}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x4, @local, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e23, 0x8, @local, 0x184}}}, 0x84) [ 720.288807][T24246] attempt to access beyond end of device [ 720.345214][T24246] loop2: rw=2049, want=79, limit=63 [ 720.373132][T24246] attempt to access beyond end of device [ 720.398306][T24246] loop2: rw=2049, want=80, limit=63 [ 720.435271][T24246] attempt to access beyond end of device [ 720.457978][T24246] loop2: rw=2049, want=81, limit=63 [ 720.476413][T24246] attempt to access beyond end of device [ 720.500981][T24246] loop2: rw=2049, want=130, limit=63 [ 720.514636][T24246] attempt to access beyond end of device [ 720.522148][T24246] loop2: rw=2049, want=131, limit=63 [ 720.527519][T24246] attempt to access beyond end of device [ 720.536564][T24246] loop2: rw=2049, want=132, limit=63 [ 720.541983][T24246] attempt to access beyond end of device [ 720.568957][T24246] loop2: rw=2049, want=133, limit=63 [ 720.579916][T24246] attempt to access beyond end of device [ 720.632522][T24246] loop2: rw=2049, want=142, limit=63 [ 720.668847][T24246] attempt to access beyond end of device [ 720.698645][T24246] loop2: rw=2049, want=143, limit=63 [ 720.717594][T24246] attempt to access beyond end of device [ 720.726678][T24246] loop2: rw=2049, want=144, limit=63 [ 720.732208][T24246] attempt to access beyond end of device [ 720.737894][T24246] loop2: rw=2049, want=145, limit=63 [ 720.745780][T24246] attempt to access beyond end of device [ 720.755861][T24246] loop2: rw=2049, want=153, limit=63 [ 720.793154][T24264] attempt to access beyond end of device [ 720.808898][T24264] loop2: rw=2049, want=78, limit=63 [ 720.818548][T24264] attempt to access beyond end of device [ 720.835723][T24264] loop2: rw=2049, want=79, limit=63 [ 720.842889][T24264] attempt to access beyond end of device [ 720.852987][T24264] loop2: rw=2049, want=80, limit=63 [ 720.860036][T24264] attempt to access beyond end of device [ 720.865846][T24264] loop2: rw=2049, want=81, limit=63 [ 720.874187][T24264] ================================================================== [ 720.874347][ T27] audit: type=1804 audit(1581789010.674:368): pid=24268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1102/file0/bus" dev="loop2" ino=206 res=1 [ 720.882321][T24264] BUG: KCSAN: data-race in integrity_iint_find / integrity_inode_get [ 720.882337][T24264] [ 720.918617][T24264] write to 0xffff8880ae120a34 of 4 bytes by task 24268 on cpu 1: [ 720.926338][T24264] integrity_inode_get+0x121/0x1a0 [ 720.931465][T24264] process_measurement+0x250/0x1190 [ 720.936674][T24264] ima_file_check+0x7e/0xb0 [ 720.941207][T24264] path_openat+0xe6e/0x3150 [ 720.945714][T24264] do_filp_open+0x11e/0x1b0 [ 720.950229][T24264] do_sys_openat2+0x4f5/0x620 [ 720.954909][T24264] do_sys_open+0xa3/0x110 [ 720.959241][T24264] __x64_sys_open+0x55/0x70 [ 720.963781][T24264] do_syscall_64+0xcc/0x3a0 [ 720.968299][T24264] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 720.974230][T24264] [ 720.976576][T24264] read to 0xffff8880ae120a34 of 4 bytes by task 24264 on cpu 0: [ 720.984211][T24264] integrity_iint_find+0x26/0x100 [ 720.989264][T24264] ima_file_free+0xc1/0x290 [ 720.993777][T24264] __fput+0x163/0x520 [ 720.997802][T24264] ____fput+0x1f/0x30 [ 721.001792][T24264] task_work_run+0xf6/0x130 [ 721.006394][T24264] exit_to_usermode_loop+0x2b4/0x2c0 [ 721.011691][T24264] do_syscall_64+0x384/0x3a0 [ 721.016296][T24264] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 721.022193][T24264] [ 721.024527][T24264] Reported by Kernel Concurrency Sanitizer on: [ 721.030692][T24264] CPU: 0 PID: 24264 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 721.039357][T24264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.049411][T24264] ================================================================== [ 721.057474][T24264] Kernel panic - not syncing: panic_on_warn set ... [ 721.064073][T24264] CPU: 0 PID: 24264 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 721.069436][ T27] audit: type=1804 audit(1581789010.874:369): pid=24292 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1102/file0/bus" dev="loop2" ino=206 res=1 [ 721.072772][T24264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.107296][T24264] Call Trace: [ 721.110647][T24264] dump_stack+0x11d/0x181 [ 721.115008][T24264] panic+0x210/0x640 [ 721.118930][T24264] ? vprintk_func+0x8d/0x140 [ 721.123541][T24264] kcsan_report.cold+0xc/0x1a [ 721.128242][T24264] kcsan_setup_watchpoint+0x3a3/0x3e0 [ 721.133638][T24264] __tsan_read4+0xc6/0x100 [ 721.138068][T24264] integrity_iint_find+0x26/0x100 [ 721.139564][ T27] audit: type=1804 audit(1581789010.944:370): pid=24293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir565476061/syzkaller.qdyWjN/1102/file0/bus" dev="loop2" ino=206 res=1 [ 721.143133][T24264] ima_file_free+0xc1/0x290 [ 721.143154][T24264] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 721.143184][T24264] __fput+0x163/0x520 [ 721.182237][T24264] ____fput+0x1f/0x30 [ 721.186235][T24264] task_work_run+0xf6/0x130 [ 721.190758][T24264] exit_to_usermode_loop+0x2b4/0x2c0 [ 721.196185][T24264] do_syscall_64+0x384/0x3a0 [ 721.200793][T24264] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 721.206686][T24264] RIP: 0033:0x45c6c9 [ 721.209390][T24268] attempt to access beyond end of device [ 721.210610][T24264] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 721.216280][T24268] loop2: rw=2049, want=177, limit=63 [ 721.235861][T24264] RSP: 002b:00007fd7599bac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 721.235879][T24264] RAX: 0000000000000001 RBX: 00007fd7599bb6d4 RCX: 000000000045c6c9 [ 721.235890][T24264] RDX: 0000000020000540 RSI: 0000000000000001 RDI: 00007fd759998000 [ 721.235899][T24264] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 721.235910][T24264] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 721.235919][T24264] R13: 00000000000001f4 R14: 00000000004c4068 R15: 000000000076bfd4 [ 721.242579][T24264] Kernel Offset: disabled [ 721.295094][T24264] Rebooting in 86400 seconds..