0180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:27 executing program 0: syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "9566be", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}}}}}, 0x0) [ 305.104718][T11831] loop2: detected capacity change from 0 to 87 [ 305.128474][T11833] loop1: detected capacity change from 0 to 8 17:41:28 executing program 0: syz_emit_ethernet(0x26, &(0x7f0000000180)={@local, @empty, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x6000, 0x0, 0x0, 0x0, @private, @loopback}}}}}, 0x0) [ 305.209207][T11833] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 305.222822][ T26] audit: type=1804 audit(1628271688.126:40): pid=11831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/167/file1/bus" dev="loop2" ino=8 res=1 errno=0 [ 305.292542][T11833] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 305.366822][T11833] F2FS-fs (loop1): Unable to read 2th superblock [ 305.384777][T11831] attempt to access beyond end of device [ 305.384777][T11831] loop2: rw=0, want=90, limit=87 [ 305.407235][ T26] audit: type=1800 audit(1628271688.126:41): pid=11831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=8 res=0 errno=0 [ 305.634643][T11804] team0: Port device team_slave_0 removed 17:41:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:28 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x1d, 0x4, &(0x7f0000001600)=@framed={{}, [@call]}, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:41:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000005d40)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005d00)={&(0x7f0000002280)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x75, 0xfa, "be5ac20f76475561f6561348170d31ec629e30d0766007a61cf2e77678aee8462d4be50012d8d5bc95a8d2e9391adbb910b29a79fb988f5f4e8f0eef939b86702f0be4a769ce4b5f6049fc73b930d9b95001faa270eee4a5c376d14eb006e66476c520fa057d031b33265474c4f10169a5"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "932dab24a7"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0xe0d, 0xfa, "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"}]]}, 0xec4}}, 0x0) 17:41:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 305.817846][T11855] loop1: detected capacity change from 0 to 8 17:41:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f0000000100)={'syztnl2\x00', 0x0}) [ 305.873228][T11855] F2FS-fs (loop1): Invalid log blocks per segment (0) 17:41:28 executing program 0: syz_emit_ethernet(0x14, &(0x7f0000000000)={@link_local, @empty, @val={@void}, {@mpls_uc={0x8847, {[], @generic="9d74"}}}}, 0x0) [ 305.927899][T11862] loop2: detected capacity change from 0 to 87 [ 305.939078][T11855] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 305.995703][T11855] F2FS-fs (loop1): Unable to read 2th superblock [ 306.042535][ T26] audit: type=1804 audit(1628271688.946:42): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/168/file1/bus" dev="loop2" ino=9 res=1 errno=0 17:41:29 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 306.242352][ T26] audit: type=1800 audit(1628271688.976:43): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=9 res=0 errno=0 17:41:29 executing program 0: syz_emit_ethernet(0xfc0, &(0x7f0000000180)={@link_local, @empty, @void, {@x25={0x805, {0x0, 0x0, 0x0, "641ece80fa26f40d6d4b541627e590123adba841538ced94bf0f33db91d244dbabdf35cc13d37dcf7f6572da9d46a85e6763230c96cdc7b0ed9e1bada23973fe7186dd61bde9c1cdb168f3d9888efd6d5b85315df66344536cec1fb59750037c7c7a8b5402038ba919f04d1bffb79707f09541e3d7d96e991e1d577b536b0b43516c4caa3caa3d5f1a603aef3582c51212ce2cd7f550ed55296b45c801a3b2000d004baa2b2d3378d0a0f76ffa111df5d1ae8c0c00ff8762bd01a0ad986adfdca8c69d8467e4eb8472d179e7397bb050c288509a45dc00d7680b601b5af8f6586fd5b33394c83334eda32155fbd17f6c9c79e865d028710fe907751413d78400e9a0f3c33e79f55e9da4cc052c166661ffeaeb9dec17dfee4a65f057fd28faf9d4c70b7af7ca9384565657cf983a6df3c30479bcb12cb1de4dc5b258b5f61f7e9449ecd4ea7204780f4d2d7b34654d2758fa1369896bcb321bd3eb5d6977d2e6303cf4dc444764fcc26dad01cfe91f2da2fccdb97a7741b07c537c77ef5f535bb0355dd15f747fc5ad80e246ae86ae6c987ae6a4ddc65e475b4c0b54890d3a97e4e344c057a77c8adbc35c147769e1df3cfdae24f47cd9831a5e68277ab6541cadf1d2acfcebe951296c52f7e7d8b36930434a6535f346f84a979aa713f9c6538e333d6cc321ed35fc7fb951d14d4626a8e56d0123c7d43f5ba7cc173c804673197850dd0c92bf0db687739395604d42998eac5372b79e28adb5e1254dba85d6c534477e05e730a17e984f33b16e78c3bfabe48e441a9867bbac6c544b5f5d59303c4b73c78718cc50e2a59bbc8643ac1e27ade62e7656214190542f1898abb146277b0d907e78397e70ea1243f98a0cc2d97e486932dc230bf6493ed313c5cb0cd7c9e08df847c116ee2d19bd98bebabfd442f49e27256c63c82d8580218420f375dba48e9f930faf4f2594e3867b951c16403a249cfae977fa78f4647be55e5ac752b0288026f274677967df12be44b1efd5a9866a85086e80e7a663f31b05d67ded870f725261588587cf29d80bd821ba0a33bdb07617a04148baf5844d5326f490992e563fa5df5216c62959761722a68551dc93f47d0f57350cfd743df509361214375d3b10f9279d1ba0fe0b475f15cf8d5a06be99acdeb3a92ba7c6e89972de7957784e850adc026825cbccfad318a11b9c399702d3c6f7b97240862d4d11ebeb5f24d5f3c50e9581457efaaa9b31c568256f6cc39f6ec7e73a3df35ed4ce537513fcb7337963c5e179410788d086947a0d3fd69586c847e310dc165203aba92c67a39f34b9914462ebcd48dc1a06df640f59d2afe39bad8e0cb56dabd111f285828898bc5624fc48de84a8885b2781cd286a30a246f1df69c6326d6f7a0fc0351d052f338851c7962c115fb47fbc22cb4d6eb9aead64d910dc6370f0bb667b62da3a3b52dafd55bf23d6648a50d518841607da5a03477a917d7d762309f452813cc6e51de9624e1de4b0dd6e39539c47077e5585a894ceb11566519a7b9c8292ae483bba19663085f772cd6fcd077302402bb7aa2dd7f43ee96c3ee57224f5aeae5b474d8a47598c19bf831fbbfa645da3fd4d82a9a733e33ccb55bfdfe3afca4f5510ea5beea17955b301b209b95d9890ac6472e0e6b81141d69b37c51cfa5c02250b27772c6303695389347ab191d7a3bdc4e1c50ec15cfa967e8e0396146fe38892501fcdadf18896c22f8550595cb85eaca4b39f63d05ba350b55f24080ec5702b4691730a9d0185ed2c43bc045f5c437193fcb6d648b7b13152295b61b06be17e68fdd3f8bd9757f98c07fca1a0fed423b24d53f1ba3b0935be51a38540043dfa4fc17daf59a33bc22813de9ed9ebc2ce549ed108b11000b6b3eb27dbabb95adfad0a2f63f78a203f735585d04043255fdcfc6121250945c5f4635ea0a15980d096fc439e1e985f84618bf775d242a3d856a5bf54570157b58c56ce0e9cbade0e47a946c2d4e24812b4d5ae700ad00eeebdc90f98cd201c9b9a24e832b410de316f4fe24fdddc0dd06e4f673896959928dfed6fe5d544f081d746659df1fc79b08af05a8f07daf5401ac0c8fe39df4f4b31bee7b4e82e7bf497fdd8c56d586f9126087881dc11622c203bf39e164d9b05b10fd9571b7a18d7f1d8ede96b02fb782b244018c215008d4c5909c071093d906104aa6204730503ca9dfa822329979179d7499bd03ee39190e6d271aeab35e04040a1e6768c10aa3d38d413bcdf1bf557a6666734c370b435700df2281a72088d12e440405afa11fbdad0e8aa7b7f773ada512144fc6dcf16c97be3b7a933dad3de77d51b9b0e838e56de79b29827c1c2b8f3dd3908dfc5eee0f215161b1064b7db77f8d73a34e28d5058411e520cc90823fa948f3fed8b69a198ea73dfc8885e46432139491bf342934515e6f1dce7b22647fbff95c7103dd1abc240ef49fb5931233eccd230b520fd70934d8fef3aa7206060099b302efe505a715519bde2710cc08ac2b3ac9af13c354fa03b58c27ddd72ddc16f044d51a26ac48d28c6dd3d3ae59c1358948f91e26d79a3f99c8eaf2eb19cea9b3635891bf7563b81d53b44193b19f7738f98f1b4efe1361fd67c71b44b3ee8fb793deefa3c3370ff51aef10d7dae1fe5f5c3de90d2be5e0998db06600aa2d898538719f77b71e67f9e31c48dcc0b5c4e312c20ba4fbce8f4a4829c508dd178575e37976cf4b86574677c6094c0a5ee39be93b115bb9ecf70fabe6fe73e6f82f87aa7371320988543b2e9c56944209ed405e2eec7423a43f4af5e85a2e462ba99ce7c7f3a09185789ca338c727b9efd564b54660be0487d1ffd91a5a0f4f82014e4e48ace6d7a645c7ead04b7b82d802537ca52e6820f82344b2c31545c9d66d0831be95874cce53a6337b0ecc24821b2f0db93b7405bc106d950cd98c9ec770899af4f59e0a758f245ce4d96e29aca668fcd3362e065afaa13fb43bd9a172b599fb0d4e553052ed224878b4b0c66b801d36a16dbe4a7356b777cd331253fc42073421ce75143c89c99f9e0b1c20f15dd9b1e25137a9e9a7d1118090e299c4a40e0c213f32bfe671dd4e5c33e37035d89029c6f6b80b097806abe22c6fcf5695eedf304bf08e3b8427988d054287ec97c0a758208fbcb1304bbecc3178b891c0ba31bac6aabf9e377cf833dfc7700fec91d5cd25eb3bbb17f4b8cec8050b4a6dc1c3a345921f7638e83b56c1d98cc3254f67235e20f8ccd702586d0fe4b476c6eb1a06cebd1f6ee4abdaa73757695e781c3c6af2f6e5bbdc222165ef7e8c1dee9c22dad3f79804b0b023382f1d696bea7bdb9acbfec2e36482dedeeadf6ec35fb948e1d8ed3367f6c8d840804475ccad8f391ed0a35f3418794a165fe28cdd5bd4e250d80a071d0fc49b4b6b9ce399759af04248a60f43c642a4827924dadaa4b1324391d6ab52070b956314428200fdad9d27602d4611d3e9a46990e7c20ffd7c6f096ab9ef0afe82f5bcc9f751bdb5e21cb84d67d67ed501e80e8dbf600161d04236cfd79e24bb236807a9023e8d84e38c4d5fb2693ee88fa6bd4cacdf0575c00b4c9c716183018fbab20ac263eed656fce50f0f7f0685e4df39cab8c1bc5adfc2e86557b95d07f5aebf0151eea1c72509f68ae2515ea9ea9434d57d7302eb5fe4301b847c5e587f5af89d996e5182a3d29398e87f7a0489ca8d377e9f7aaa38b48881a3a508bb4f531a4a7da77126dc6e774a09d566bca98bed964a2ae2d4ef4ddea62d61a2ea5be448e27474980c698e2dc4ddc6278a94d164d80a545413008ff5e0531b9e6823377df0a2c18133a1846861a821960336bfd14cc5c5379af8aadb7c908033342c52691a6753521d242ddcc7a53d45c2765028df2de393b4ea03eb3d5194503864afe31aaeb0bdeb23c2937e79b14605cca3f8ea32c6e28b9104bb800fa8eb1c36dbda90cce2b7959f86f204977ae999ad71d711ca28f9cdb59738d58d3b033e1e61d47c42a5698d0227e3681218f998b6c1e037b9e3bf5c08dfd0913a8098cb922e640c557d5fa4c11d1a2b474f8443014e130d98e3dc1356472825a85ea8623fe08c56c431c4ca116c02a97a707c1b13bc630f0ef47e5c30e32d246978ba029740c344ffa8930f115a30d58bd94dd51bb1d3c76e9253342f4462256ce276d7bdccf07231764edffeab5bf4a346701146f2224d6f76213a8c836d45a510185edb874015c29272b6d4178b8edbd498ac8e42a25b9744bf270f7505e6dec23d0a6dc1bbb5c2b7692eb52c5c814c956aa2dcf71907f589656f1d77546a19dbc8419b3fc84b6c33c48018b874e8c6217cc4b0907cc262ccd03404a8f1bbf3a2796c8f6a3bde6387deebea7dd4a0bbfc1015161cef93dc541749cf48f7caf646c41cf0be6ae2663778a2d8463f930a797918725f6b00eb5af32fa00da98b8cda4113fdb348e56177ca23103b4627a4bed49d3169ab3528809c949cf9c16a62d77861c9c2bdb4eda0bb9366376e1f85b812a496dc2630c7f293f2e34165b551da31cd20044f7d25c0250706b2dd5a94e6e700923b046f11bc208794772d0f99bbf1cf74614c9ff4d09cfd9903dd771b0bdcc1eac91d8a30a5675204b2bda8e07ecee490d72526c03f4118b53d49e3bcf65cd1ebd299c61a26da79bebb0cafacdb0d9dea5ae7cbc976bd16f375e90c9bbfdeff016c7c8e0093decd3af4351568f965a92719bad425c4ea0451d170a6e93974efbca84959c2074cb8ffd5bb36451c2474b509379e448a4f3b0c62b7618c4c4c90c0f9a89da948c309b793c64f3be585aff44cf027f392e092b6a21240f67663fe85d4d5030e6b458fba5910d352a7fcf2ff15d5fdea920d9ebc7061e3835c603f23a9fa77a8ad0cb47336c8a8a01e83b4c2fad87bbe1797551ffd6cbcf4e61d330b4311e850f1e37b4e2ee885a94d4926e12e91d8a0d67631e39720a77005d7058bd7605b84633cddd0c62836efd51e6412ae1e0d32d3a478bc359839823e43daa6649e93c92363605d2752a6c623de0aaeec54cb3c68f6c9150aafbff62cec54900c984731fab1499a60cb9e2cb40eba7641823f10735ab2d4b67300f9f195e3ebd9655218d4fbe98957b84f792643e2a1786e0c112b35f1e54c66f7dbafbf017bce112d17b9f95cb260dcd13d449de7c0994504d17dd8dbc22c7c9c60b8ba3640611f62f4d3d6e53bb85e05f36fd2e358c1a3489add47200d8ef9cccf62cd131fdea9b251f1dbccd7a44b683a577960fd9e8c60bf114fe50aa2d9c3121926f6142e0bb3c6b1474762b988f987460a1af6443873502b14f3b684469d448dda7a909c63ba593d6b033bb501937ef87790d8398c5dfc400693054ee5adef0279a53038eed60fc6c697ca11eaea03b3fb73eef5e1c453ee2a7a232a71e78dbd346035b34b66875ce08b40320a497be7fc50b5dcac8d27dee85a4d77d7d699f975f97393dbb2d487d56f75826f638fb8e626cb10f0358169eda126c33b6545c5f82fb53b4e7822eb94e4bcf1fc03c2e94d995c6399eaa3d4c0fcd2ab7d68811c439f544d1745a8a03b03dff741d585d651d15ffb353527eed828b6ac5f473f785f9f8ba22b654fd7964705b8c53ed8f3e7721c476cfe4c913cd83f9f15c7a476e84a6a963c35b9722af778d0e"}}}}, 0x0) [ 306.312897][T11862] attempt to access beyond end of device [ 306.312897][T11862] loop2: rw=0, want=90, limit=87 [ 306.435883][T11880] loop1: detected capacity change from 0 to 8 [ 306.473050][T11880] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 306.494722][T11880] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 306.523052][T11880] F2FS-fs (loop1): Unable to read 2th superblock [ 306.610387][T11864] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 306.679970][T11864] team0: Port device team_slave_0 added [ 306.686340][T11867] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:41:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 17:41:29 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 306.800763][T11894] loop2: detected capacity change from 0 to 87 [ 306.875735][ T26] audit: type=1804 audit(1628271689.776:44): pid=11894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/169/file1/bus" dev="loop2" ino=10 res=1 errno=0 [ 306.961142][ T26] audit: type=1800 audit(1628271689.776:45): pid=11894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 307.050384][T11894] attempt to access beyond end of device [ 307.050384][T11894] loop2: rw=0, want=90, limit=87 [ 307.105974][T11867] team0: Port device team_slave_0 removed 17:41:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:30 executing program 0: syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local, @empty, @val={@void}, {@mpls_uc}}, 0x0) 17:41:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}, {r1}], 0x2, 0x7091b042) [ 307.296317][T11911] loop2: detected capacity change from 0 to 87 [ 307.304351][T11910] loop1: detected capacity change from 0 to 8 17:41:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)="9e", 0x1}, {&(0x7f0000000900)="bd", 0x1}, {&(0x7f00000009c0)='\v', 0x1}], 0x3}, 0x0) [ 307.353687][T11910] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 307.390302][T11910] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 17:41:30 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000180)={@local, @empty, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}}, 0x0) [ 307.466858][T11910] F2FS-fs (loop1): Unable to read 2th superblock [ 307.602066][T11911] attempt to access beyond end of device [ 307.602066][T11911] loop2: rw=0, want=90, limit=87 17:41:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 17:41:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) [ 307.942273][T11921] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:41:31 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7b072f47707819ce25f6127a536c2356996ff278b40a75342060000003a9425c67455"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 308.167542][T11921] team0: Port device team_slave_0 added [ 308.170694][T11942] loop2: detected capacity change from 0 to 87 [ 308.179313][T11939] loop1: detected capacity change from 0 to 8 [ 308.204048][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.222900][T11939] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 308.237697][T11939] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 17:41:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) 17:41:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x541b, &(0x7f0000000100)={'syztnl2\x00', 0x0}) [ 308.287158][T11939] F2FS-fs (loop1): Unable to read 2th superblock [ 308.290230][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 308.290243][ T26] audit: type=1804 audit(1628271691.186:48): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/171/file1/bus" dev="sda1" ino=14416 res=1 errno=0 17:41:31 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 308.488810][ T26] audit: type=1800 audit(1628271691.236:49): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14416 res=0 errno=0 17:41:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) 17:41:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 308.655170][T11964] loop1: detected capacity change from 0 to 8 [ 308.769454][T11964] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 308.858989][T11964] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 308.914414][T11964] F2FS-fs (loop1): Unable to read 2th superblock 17:41:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 17:41:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89b1, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 17:41:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:32 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:32 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "4fc983", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8bc7a2", 0x0, '\x00$T'}}}}}}}, 0x0) [ 309.232753][T11984] loop1: detected capacity change from 0 to 8 [ 309.272362][T11984] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 309.303797][T11984] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 309.330890][T11984] F2FS-fs (loop1): Unable to read 2th superblock 17:41:32 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 309.397636][T11962] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 309.442331][T11965] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 309.562986][T12000] loop2: detected capacity change from 0 to 87 [ 309.615409][ T26] audit: type=1804 audit(1628271692.516:50): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/172/file1/bus" dev="loop2" ino=12 res=1 errno=0 [ 309.635010][T12000] attempt to access beyond end of device [ 309.635010][T12000] loop2: rw=0, want=90, limit=87 [ 309.705972][ T26] audit: type=1800 audit(1628271692.516:51): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 310.051552][T11965] team0: Port device team_slave_0 removed 17:41:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x207, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x40}}, 0x0) 17:41:33 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000440)={r2, 0x1, 0x6, @local}, 0x10) [ 310.244015][T12019] loop1: detected capacity change from 0 to 8 [ 310.247429][T12020] loop2: detected capacity change from 0 to 87 [ 310.299448][T12019] F2FS-fs (loop1): Invalid log blocks per segment (0) 17:41:33 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0x12, "197da763c86c3d0383ab8e78e0a60d6f"}, {0x0, 0x6, "90500a0f"}, {0x0, 0xb, "ff27cf996836a1b559"}, {0x0, 0x7, "6e9e34b9ab"}, {0x0, 0xd, "06a42803ae9545d09aa496"}]}]}}, @address_request}}}}, 0x0) [ 310.367711][T12019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 310.381862][ T26] audit: type=1804 audit(1628271693.286:52): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/173/file1/bus" dev="loop2" ino=13 res=1 errno=0 [ 310.449375][T12019] F2FS-fs (loop1): Unable to read 2th superblock [ 310.497181][T12020] attempt to access beyond end of device [ 310.497181][T12020] loop2: rw=0, want=90, limit=87 [ 310.504566][ T26] audit: type=1800 audit(1628271693.326:53): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=13 res=0 errno=0 17:41:33 executing program 4: syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "9566be", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}]}}}}}, 0x0) 17:41:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 17:41:33 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @remote, @val={@void, {0x8906}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "9566be", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}}}, 0x0) [ 310.739935][T12016] device batadv0 entered promiscuous mode [ 310.758056][T12028] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:41:33 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:33 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 310.871476][T12028] team0: Port device team_slave_0 added 17:41:33 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) [ 310.913875][T12030] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 310.988426][T12045] loop2: detected capacity change from 0 to 87 [ 311.045154][T12051] loop1: detected capacity change from 0 to 8 [ 311.090690][T12051] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 311.163472][T12051] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 311.207653][T12051] F2FS-fs (loop1): Unable to read 2th superblock [ 311.378097][T12030] team0: Port device team_slave_0 removed [ 311.389151][T12015] device batadv0 left promiscuous mode 17:41:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 17:41:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 17:41:34 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 311.562651][T12068] loop2: detected capacity change from 0 to 87 [ 311.572629][T12070] loop1: detected capacity change from 0 to 8 [ 311.619638][T12070] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 311.661178][T12070] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 311.713676][T12070] F2FS-fs (loop1): Unable to read 2th superblock [ 312.089598][T12016] device batadv0 entered promiscuous mode [ 312.120902][T12016] device batadv0 left promiscuous mode [ 312.136412][T12078] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:41:35 executing program 0: syz_emit_ethernet(0x3c, &(0x7f00000003c0)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "9566be", 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, {[], '\'u'}}}}}, 0x0) 17:41:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 17:41:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 17:41:35 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:35 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 312.277356][T12078] team0: Port device team_slave_0 added [ 312.321478][T12079] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 312.429425][T12098] loop2: detected capacity change from 0 to 87 [ 312.434295][T12097] loop1: detected capacity change from 0 to 8 17:41:35 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@random="8d9b3652b73b", @dev, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @broadcast, @private1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) 17:41:35 executing program 0: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x1efa1628879a4d66) [ 312.518244][T12097] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 312.548950][T12097] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 17:41:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 312.569812][T12097] F2FS-fs (loop1): Unable to read 2th superblock [ 312.816837][T12115] loop2: detected capacity change from 0 to 87 [ 312.825706][T12079] team0: Port device team_slave_0 removed 17:41:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f00000004c0)="b134e7bb", 0x4) 17:41:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) ioctl$sock_ifreq(r1, 0x8917, &(0x7f0000000d00)={'vlan0\x00', @ifru_hwaddr=@dev}) [ 312.912902][ T26] audit: type=1804 audit(1628271695.816:54): pid=12115 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/177/file1/bus" dev="loop2" ino=17 res=1 errno=0 17:41:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 313.037470][ T26] audit: type=1800 audit(1628271695.816:55): pid=12115 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=17 res=0 errno=0 17:41:36 executing program 4: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 313.095545][T12124] loop1: detected capacity change from 0 to 8 17:41:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) [ 313.183064][T12124] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 313.222267][T12135] loop2: detected capacity change from 0 to 87 [ 313.248883][T12124] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 313.321178][T12124] F2FS-fs (loop1): Unable to read 2th superblock [ 313.328429][ T26] audit: type=1804 audit(1628271696.226:56): pid=12135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/178/file1/bus" dev="loop2" ino=18 res=1 errno=0 17:41:36 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @remote, @val={@void, {0x806}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "9566be", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}}}, 0x0) [ 313.496942][ T26] audit: type=1800 audit(1628271696.256:57): pid=12135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 17:41:36 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) [ 313.691474][T12134] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 313.787585][T12134] team0: Port device team_slave_0 added [ 313.832867][T12139] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 313.923480][T12161] loop2: detected capacity change from 0 to 87 [ 313.983733][ T26] audit: type=1804 audit(1628271696.886:58): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/179/file1/bus" dev="loop2" ino=19 res=1 errno=0 [ 314.046793][ T26] audit: type=1800 audit(1628271696.886:59): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 314.084788][T12139] team0: Port device team_slave_0 removed 17:41:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001800)="85af134f034119d96aaa732bc87a971c", 0x10) 17:41:37 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000180)={@random="401b53c22b7c", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "8fcc78", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback}}}}, 0x0) 17:41:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000200)) 17:41:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8919, &(0x7f0000000000)={'gre0\x00', 0x0}) [ 314.376117][T12179] loop2: detected capacity change from 0 to 87 [ 314.492708][ T26] audit: type=1804 audit(1628271697.396:60): pid=12179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/180/file1/bus" dev="loop2" ino=20 res=1 errno=0 [ 314.595409][T12189] loop1: detected capacity change from 0 to 8 [ 314.625246][T12189] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 314.632261][T12189] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 314.643167][T12189] F2FS-fs (loop1): Unable to read 2th superblock [ 314.658233][ T26] audit: type=1800 audit(1628271697.396:61): pid=12179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=20 res=0 errno=0 17:41:37 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:37 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 17:41:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 314.865514][T12178] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 314.955725][T12178] team0: Port device team_slave_0 added [ 315.022388][T12205] loop2: detected capacity change from 0 to 87 [ 315.023340][T12183] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 315.030112][T12204] loop1: detected capacity change from 0 to 8 [ 315.115449][T12204] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 315.133695][ T26] audit: type=1804 audit(1628271698.036:62): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/181/file1/bus" dev="sda1" ino=14616 res=1 errno=0 [ 315.151079][T12204] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 315.180949][T12204] F2FS-fs (loop1): Unable to read 2th superblock [ 315.270157][ T26] audit: type=1800 audit(1628271698.036:63): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14616 res=0 errno=0 17:41:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 17:41:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 315.504430][T12183] team0: Port device team_slave_0 removed 17:41:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@empty, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, 0x0) pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffed2) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@isdn={0x22, 0x1b, 0x0, 0x3, 0xd3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)="2242147327f3dae1c931f1c085c318b033be83becc0469f4ee9a1b57172a0badc4ba4837847ef575de281d4d5d26732388db228260a16f507a12f38608be1eb927e03b92655e501f38659ab8e0a6ab348db38e367a571c411a98d71b1db8338b29410292cc3d3e618d310ad6196a19850124059daab5e44bf030ed461f18aa411c4cec5d7db8bb45ffa3ee01a82d2803955714f6e197e176de34a7c508e34a17a391d26f215e3b4306c7c794560f1410f266219a4029ca150329105c0fb6740f06623a67906e448e4f747f42e055c55032", 0xd1}], 0x1, &(0x7f0000000800)=[{0xc0, 0x39f, 0xfffffffe, "a57d60b16b3677d267f5911d8d7aff22f6a87846a458d9fb3e52b53bec6e036f7bc1415f7f69f3d7164fd5d41848d1b1d84acbabc7cee25da0d72dd0883099d78931ceff782621907948c22cc4cf380b0ff6b5cdcb3984169a2490f9347a0691599e1997d4f909a2092aa7a5678e07503f765b57d1b39c722ffa00496c5add1598f66c5586b7f62fdcff1b32acde5ad14286ba952b87144fe6c568202762a45aaf1d5eff755585f383"}, {0x78, 0x114, 0x3, "8382d7dc94feafc9b8b089c9c634b1fb24243fe03d69e8fd001d59d4d5a85aabe8ead110ada4d747ff881a0b6bf324d0e6c69f38a4753e43eec48f504a13ae9bb65803d617fb3c6696275aad50568b45967cfdccbd0d1a1a7aaa14dc81de9b94fcfd89ca9091"}, {0xc8, 0x6, 0x1ff, "1e38abd8d1414f3951a18a416bc5c8ee6138fc2edbe8bf4bed7f4bd2f41583b33ce42885d91c5d2a41c953c23ee7425bab7a20b09b7ccb68f63c1e15311e828631bff911c439740705711f31fcff693d5af5f96cb02178024b713f67607d10a88b06771e9fac2db8b46337d24667d770a17598e0b7dc7cb89c35c085e8a09e68d811e3b5cac88fb9f5870b562a8bef2d9f1687f47edcab3b053e4accb82ca5e50f09e66b1819e33db2adce64df66e0701570cd838901a8"}, {0x110, 0x0, 0xffffffff, "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"}, {0x78, 0x105, 0x1ff, "b21277e75e2192d26c437f3e215335c1412f0d7d3503e22dfe8a4ea20c1220b88eafd5f3c94d750afd0571e0f581e6bbd94f8cbd90c6171deee95e861f719457f5a99bfaa2211b71e04b84e13983f12dc5eed5094c4cd258b090b3a0fdf91208a6"}, {0xa8, 0x119, 0xd81, "851ba43a73775d7bf0acf84d1a3d1a930ba8cbccdcbd550303ba69852ca853e475a47dbd27bae8d2d3605a13fafb861e70aee09dad407ec4091cef8a3297b9308f8c3c43a59b46cc98e369b3c6b7a6b2e0546f09af1439ed693b1593852a9fb47599b205c0b1533f0321609ed9d5aed5719d7ac7f992648ab6ffeb1a5366face89d4dafba4702fb8ad51d7c75e41143287b3"}], 0x430}, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x90002014}) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x17, r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) [ 315.612332][T12226] loop1: detected capacity change from 0 to 8 [ 315.658021][T12229] loop2: detected capacity change from 0 to 87 [ 315.685586][T12226] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 315.760416][T12226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 315.771390][ T26] audit: type=1804 audit(1628271698.676:64): pid=12229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/182/file1/bus" dev="loop2" ino=21 res=1 errno=0 17:41:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffffff000200000000f"], 0x38}}, 0x0) [ 315.810165][T12226] F2FS-fs (loop1): Unable to read 2th superblock 17:41:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsmount(r0, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) [ 315.914776][ T26] audit: type=1800 audit(1628271698.716:65): pid=12229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=21 res=0 errno=0 17:41:38 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 316.155246][T12251] loop2: detected capacity change from 0 to 87 [ 316.156074][T12252] loop1: detected capacity change from 0 to 8 [ 316.192750][T12252] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 316.206454][T12252] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 316.227145][T12252] F2FS-fs (loop1): Unable to read 2th superblock 17:41:39 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:39 executing program 0: select(0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffffe, 0x0) 17:41:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsmount(r0, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) [ 316.470519][T12235] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 316.508388][T12235] team0: Port device team_slave_0 added 17:41:39 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 316.543185][T12238] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 316.717661][T12273] loop1: detected capacity change from 0 to 8 [ 316.721180][T12274] loop2: detected capacity change from 0 to 87 [ 316.741632][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.748072][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.789230][T12273] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 316.826039][T12273] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 316.873679][T12273] F2FS-fs (loop1): Unable to read 2th superblock [ 317.113278][T12238] team0: Port device team_slave_0 removed 17:41:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsmount(r0, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) 17:41:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 317.287008][T12292] loop2: detected capacity change from 0 to 87 [ 317.294883][T12290] loop1: detected capacity change from 0 to 8 [ 317.340833][T12290] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 317.378053][T12290] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 317.430796][T12290] F2FS-fs (loop1): Unable to read 2th superblock 17:41:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 317.720127][T12307] loop2: detected capacity change from 0 to 87 [ 318.217974][T12300] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 318.255460][T12300] team0: Port device team_slave_0 added [ 318.273158][T12301] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:41:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@empty, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, 0x0) pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffed2) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@isdn={0x22, 0x1b, 0x0, 0x3, 0xd3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)="2242147327f3dae1c931f1c085c318b033be83becc0469f4ee9a1b57172a0badc4ba4837847ef575de281d4d5d26732388db228260a16f507a12f38608be1eb927e03b92655e501f38659ab8e0a6ab348db38e367a571c411a98d71b1db8338b29410292cc3d3e618d310ad6196a19850124059daab5e44bf030ed461f18aa411c4cec5d7db8bb45ffa3ee01a82d2803955714f6e197e176de34a7c508e34a17a391d26f215e3b4306c7c794560f1410f266219a4029ca150329105c0fb6740f06623a67906e448e4f747f42e055c55032", 0xd1}], 0x1, &(0x7f0000000800)=[{0xc0, 0x39f, 0xfffffffe, "a57d60b16b3677d267f5911d8d7aff22f6a87846a458d9fb3e52b53bec6e036f7bc1415f7f69f3d7164fd5d41848d1b1d84acbabc7cee25da0d72dd0883099d78931ceff782621907948c22cc4cf380b0ff6b5cdcb3984169a2490f9347a0691599e1997d4f909a2092aa7a5678e07503f765b57d1b39c722ffa00496c5add1598f66c5586b7f62fdcff1b32acde5ad14286ba952b87144fe6c568202762a45aaf1d5eff755585f383"}, {0x78, 0x114, 0x3, "8382d7dc94feafc9b8b089c9c634b1fb24243fe03d69e8fd001d59d4d5a85aabe8ead110ada4d747ff881a0b6bf324d0e6c69f38a4753e43eec48f504a13ae9bb65803d617fb3c6696275aad50568b45967cfdccbd0d1a1a7aaa14dc81de9b94fcfd89ca9091"}, {0xc8, 0x6, 0x1ff, "1e38abd8d1414f3951a18a416bc5c8ee6138fc2edbe8bf4bed7f4bd2f41583b33ce42885d91c5d2a41c953c23ee7425bab7a20b09b7ccb68f63c1e15311e828631bff911c439740705711f31fcff693d5af5f96cb02178024b713f67607d10a88b06771e9fac2db8b46337d24667d770a17598e0b7dc7cb89c35c085e8a09e68d811e3b5cac88fb9f5870b562a8bef2d9f1687f47edcab3b053e4accb82ca5e50f09e66b1819e33db2adce64df66e0701570cd838901a8"}, {0x110, 0x0, 0xffffffff, "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"}, {0x78, 0x105, 0x1ff, "b21277e75e2192d26c437f3e215335c1412f0d7d3503e22dfe8a4ea20c1220b88eafd5f3c94d750afd0571e0f581e6bbd94f8cbd90c6171deee95e861f719457f5a99bfaa2211b71e04b84e13983f12dc5eed5094c4cd258b090b3a0fdf91208a6"}, {0xa8, 0x119, 0xd81, "851ba43a73775d7bf0acf84d1a3d1a930ba8cbccdcbd550303ba69852ca853e475a47dbd27bae8d2d3605a13fafb861e70aee09dad407ec4091cef8a3297b9308f8c3c43a59b46cc98e369b3c6b7a6b2e0546f09af1439ed693b1593852a9fb47599b205c0b1533f0321609ed9d5aed5719d7ac7f992648ab6ffeb1a5366face89d4dafba4702fb8ad51d7c75e41143287b3"}], 0x430}, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x90002014}) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x17, r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) 17:41:41 executing program 0: setitimer(0x0, &(0x7f0000000100)={{0x40a79dfffff}}, 0x0) 17:41:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:41 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7b072f47707819ce25f6127a536c2356996ff278b40a75342060000003a9425c67455"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 318.632482][T12301] team0: Port device team_slave_0 removed [ 318.714494][T12321] loop1: detected capacity change from 0 to 8 17:41:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x8, 0x0, &(0x7f0000000100)) [ 318.759892][T12321] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 318.776741][T12321] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 318.797571][T12321] F2FS-fs (loop1): Unable to read 2th superblock [ 318.846035][T12331] loop2: detected capacity change from 0 to 87 17:41:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 318.995278][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 318.995293][ T26] audit: type=1804 audit(1628271701.887:68): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/187/bus" dev="sda1" ino=14639 res=1 errno=0 17:41:42 executing program 0: syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "9566be", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, {[@fragment={0x0, 0x0, 0x5}]}}}}}, 0x0) [ 319.292741][ T26] audit: type=1800 audit(1628271701.897:69): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14639 res=0 errno=0 [ 319.356406][T12345] loop1: detected capacity change from 0 to 8 [ 319.385148][T12345] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 319.402579][T12345] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 319.469389][T12345] F2FS-fs (loop1): Unable to read 2th superblock 17:41:42 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001600)=@framed, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000016c0), 0x8, 0x10, 0x0}, 0x78) 17:41:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 319.813552][T12356] loop1: detected capacity change from 0 to 8 [ 319.848363][T12356] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 319.871500][T12356] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 319.891080][T12356] F2FS-fs (loop1): Unable to read 2th superblock [ 319.933129][T12342] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 319.970070][T12342] team0: Port device team_slave_0 added [ 320.003032][T12341] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 320.081577][T12365] loop2: detected capacity change from 0 to 87 [ 320.157087][ T26] audit: type=1804 audit(1628271703.057:70): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/188/bus" dev="sda1" ino=14017 res=1 errno=0 [ 320.214723][ T26] audit: type=1800 audit(1628271703.057:71): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14017 res=0 errno=0 [ 320.391247][T12341] team0: Port device team_slave_0 removed 17:41:43 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@empty, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, 0x0) pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffed2) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@isdn={0x22, 0x1b, 0x0, 0x3, 0xd3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)="2242147327f3dae1c931f1c085c318b033be83becc0469f4ee9a1b57172a0badc4ba4837847ef575de281d4d5d26732388db228260a16f507a12f38608be1eb927e03b92655e501f38659ab8e0a6ab348db38e367a571c411a98d71b1db8338b29410292cc3d3e618d310ad6196a19850124059daab5e44bf030ed461f18aa411c4cec5d7db8bb45ffa3ee01a82d2803955714f6e197e176de34a7c508e34a17a391d26f215e3b4306c7c794560f1410f266219a4029ca150329105c0fb6740f06623a67906e448e4f747f42e055c55032", 0xd1}], 0x1, &(0x7f0000000800)=[{0xc0, 0x39f, 0xfffffffe, "a57d60b16b3677d267f5911d8d7aff22f6a87846a458d9fb3e52b53bec6e036f7bc1415f7f69f3d7164fd5d41848d1b1d84acbabc7cee25da0d72dd0883099d78931ceff782621907948c22cc4cf380b0ff6b5cdcb3984169a2490f9347a0691599e1997d4f909a2092aa7a5678e07503f765b57d1b39c722ffa00496c5add1598f66c5586b7f62fdcff1b32acde5ad14286ba952b87144fe6c568202762a45aaf1d5eff755585f383"}, {0x78, 0x114, 0x3, "8382d7dc94feafc9b8b089c9c634b1fb24243fe03d69e8fd001d59d4d5a85aabe8ead110ada4d747ff881a0b6bf324d0e6c69f38a4753e43eec48f504a13ae9bb65803d617fb3c6696275aad50568b45967cfdccbd0d1a1a7aaa14dc81de9b94fcfd89ca9091"}, {0xc8, 0x6, 0x1ff, "1e38abd8d1414f3951a18a416bc5c8ee6138fc2edbe8bf4bed7f4bd2f41583b33ce42885d91c5d2a41c953c23ee7425bab7a20b09b7ccb68f63c1e15311e828631bff911c439740705711f31fcff693d5af5f96cb02178024b713f67607d10a88b06771e9fac2db8b46337d24667d770a17598e0b7dc7cb89c35c085e8a09e68d811e3b5cac88fb9f5870b562a8bef2d9f1687f47edcab3b053e4accb82ca5e50f09e66b1819e33db2adce64df66e0701570cd838901a8"}, {0x110, 0x0, 0xffffffff, "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"}, {0x78, 0x105, 0x1ff, "b21277e75e2192d26c437f3e215335c1412f0d7d3503e22dfe8a4ea20c1220b88eafd5f3c94d750afd0571e0f581e6bbd94f8cbd90c6171deee95e861f719457f5a99bfaa2211b71e04b84e13983f12dc5eed5094c4cd258b090b3a0fdf91208a6"}, {0xa8, 0x119, 0xd81, "851ba43a73775d7bf0acf84d1a3d1a930ba8cbccdcbd550303ba69852ca853e475a47dbd27bae8d2d3605a13fafb861e70aee09dad407ec4091cef8a3297b9308f8c3c43a59b46cc98e369b3c6b7a6b2e0546f09af1439ed693b1593852a9fb47599b205c0b1533f0321609ed9d5aed5719d7ac7f992648ab6ffeb1a5366face89d4dafba4702fb8ad51d7c75e41143287b3"}], 0x430}, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x90002014}) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x17, r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) 17:41:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x0, 0x0) 17:41:43 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:43 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 321.010213][T12378] loop1: detected capacity change from 0 to 8 17:41:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x7}, 0x40) [ 321.070706][T12378] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 321.112895][T12378] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 321.170387][T12378] F2FS-fs (loop1): Unable to read 2th superblock [ 321.238820][ T26] audit: type=1804 audit(1628271704.137:72): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/189/bus" dev="sda1" ino=14652 res=1 errno=0 17:41:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 321.334001][ T26] audit: type=1800 audit(1628271704.157:73): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14652 res=0 errno=0 17:41:44 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 321.553726][T12402] loop1: detected capacity change from 0 to 8 [ 321.605373][T12402] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 321.631901][T12402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 321.674643][T12402] F2FS-fs (loop1): Unable to read 2th superblock 17:41:44 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 322.122151][T12389] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 322.156387][T12389] team0: Port device team_slave_0 added 17:41:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x110, r1, 0x8fc8979809c97ceb, 0x0, 0x0, {}, [{{0x6}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0xfffffffffffffd16}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x3}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x110}, 0x7}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) [ 322.188495][T12392] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 322.280378][ T26] audit: type=1804 audit(1628271705.187:74): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/190/bus" dev="sda1" ino=13969 res=1 errno=0 [ 322.389694][T12418] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 322.430757][T12416] loop1: detected capacity change from 0 to 8 [ 322.456062][ T26] audit: type=1800 audit(1628271705.227:75): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13969 res=0 errno=0 [ 322.503116][T12416] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 322.539099][T12416] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 322.610436][T12416] F2FS-fs (loop1): Unable to read 2th superblock [ 322.638548][T12420] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 322.914080][T12392] team0: Port device team_slave_0 removed 17:41:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@empty, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, 0x0) pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffed2) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@isdn={0x22, 0x1b, 0x0, 0x3, 0xd3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)="2242147327f3dae1c931f1c085c318b033be83becc0469f4ee9a1b57172a0badc4ba4837847ef575de281d4d5d26732388db228260a16f507a12f38608be1eb927e03b92655e501f38659ab8e0a6ab348db38e367a571c411a98d71b1db8338b29410292cc3d3e618d310ad6196a19850124059daab5e44bf030ed461f18aa411c4cec5d7db8bb45ffa3ee01a82d2803955714f6e197e176de34a7c508e34a17a391d26f215e3b4306c7c794560f1410f266219a4029ca150329105c0fb6740f06623a67906e448e4f747f42e055c55032", 0xd1}], 0x1, &(0x7f0000000800)=[{0xc0, 0x39f, 0xfffffffe, "a57d60b16b3677d267f5911d8d7aff22f6a87846a458d9fb3e52b53bec6e036f7bc1415f7f69f3d7164fd5d41848d1b1d84acbabc7cee25da0d72dd0883099d78931ceff782621907948c22cc4cf380b0ff6b5cdcb3984169a2490f9347a0691599e1997d4f909a2092aa7a5678e07503f765b57d1b39c722ffa00496c5add1598f66c5586b7f62fdcff1b32acde5ad14286ba952b87144fe6c568202762a45aaf1d5eff755585f383"}, {0x78, 0x114, 0x3, "8382d7dc94feafc9b8b089c9c634b1fb24243fe03d69e8fd001d59d4d5a85aabe8ead110ada4d747ff881a0b6bf324d0e6c69f38a4753e43eec48f504a13ae9bb65803d617fb3c6696275aad50568b45967cfdccbd0d1a1a7aaa14dc81de9b94fcfd89ca9091"}, {0xc8, 0x6, 0x1ff, "1e38abd8d1414f3951a18a416bc5c8ee6138fc2edbe8bf4bed7f4bd2f41583b33ce42885d91c5d2a41c953c23ee7425bab7a20b09b7ccb68f63c1e15311e828631bff911c439740705711f31fcff693d5af5f96cb02178024b713f67607d10a88b06771e9fac2db8b46337d24667d770a17598e0b7dc7cb89c35c085e8a09e68d811e3b5cac88fb9f5870b562a8bef2d9f1687f47edcab3b053e4accb82ca5e50f09e66b1819e33db2adce64df66e0701570cd838901a8"}, {0x110, 0x0, 0xffffffff, "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"}, {0x78, 0x105, 0x1ff, "b21277e75e2192d26c437f3e215335c1412f0d7d3503e22dfe8a4ea20c1220b88eafd5f3c94d750afd0571e0f581e6bbd94f8cbd90c6171deee95e861f719457f5a99bfaa2211b71e04b84e13983f12dc5eed5094c4cd258b090b3a0fdf91208a6"}, {0xa8, 0x119, 0xd81, "851ba43a73775d7bf0acf84d1a3d1a930ba8cbccdcbd550303ba69852ca853e475a47dbd27bae8d2d3605a13fafb861e70aee09dad407ec4091cef8a3297b9308f8c3c43a59b46cc98e369b3c6b7a6b2e0546f09af1439ed693b1593852a9fb47599b205c0b1533f0321609ed9d5aed5719d7ac7f992648ab6ffeb1a5366face89d4dafba4702fb8ad51d7c75e41143287b3"}], 0x430}, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x90002014}) bind$xdp(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x17, r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) 17:41:46 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:46 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffe1, 0x349802) 17:41:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:46 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 323.389744][T12439] loop1: detected capacity change from 0 to 8 [ 323.433516][ T26] audit: type=1804 audit(1628271706.337:76): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/191/bus" dev="sda1" ino=14661 res=1 errno=0 17:41:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x8918, 0x0) [ 323.502396][T12439] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 323.529951][T12439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 323.557214][ T26] audit: type=1800 audit(1628271706.337:77): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14661 res=0 errno=0 [ 323.594813][T12439] F2FS-fs (loop1): Unable to read 2th superblock 17:41:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x6}]}) 17:41:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) [ 324.004772][T12463] loop1: detected capacity change from 0 to 8 [ 324.066933][T12463] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 324.107462][T12463] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 324.158172][T12463] F2FS-fs (loop1): Unable to read 2th superblock 17:41:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 324.504100][T12473] loop2: detected capacity change from 0 to 87 [ 324.591831][T12475] loop1: detected capacity change from 0 to 8 [ 324.622461][ T26] audit: type=1804 audit(1628271707.527:78): pid=12473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/192/file1/bus" dev="sda1" ino=14665 res=1 errno=0 [ 324.710021][T12475] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 324.767671][T12475] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 324.809894][ T26] audit: type=1800 audit(1628271707.527:79): pid=12473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14665 res=0 errno=0 [ 324.838907][T12448] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 324.889149][T12475] F2FS-fs (loop1): Unable to read 2th superblock [ 324.910303][T12448] team0: Port device team_slave_0 added [ 324.970510][T12452] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 325.586648][T12452] team0: Port device team_slave_0 removed 17:41:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:49 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:49 executing program 0: r0 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r1}, 0x8) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = fsmount(r1, 0x1, 0x11) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)=',\x00', 0x0, r0) socket(0x6, 0x2, 0x401) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default, 0x3}, 0x0, 0x0, 0x0, 0xfe80}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r7}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x68, r5, 0x8fc8979809c97ceb, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x68}}, 0x0) 17:41:49 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:49 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x6c, &(0x7f0000000180), &(0x7f00000001c0)=0x10) [ 326.260592][T12495] loop2: detected capacity change from 0 to 87 [ 326.299895][T12496] loop1: detected capacity change from 0 to 8 [ 326.342920][ T26] audit: type=1804 audit(1628271709.247:80): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/193/file1/bus" dev="sda1" ino=14687 res=1 errno=0 [ 326.460768][T12496] F2FS-fs (loop1): Invalid log blocks per segment (0) 17:41:49 executing program 4: mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0) [ 326.547682][T12496] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 326.577815][ T26] audit: type=1800 audit(1628271709.247:81): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14687 res=0 errno=0 [ 326.662839][T12496] F2FS-fs (loop1): Unable to read 2th superblock 17:41:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:49 executing program 4: r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x6, 0x0, 0x0, 0xffffffffffffffff) [ 327.004077][T12514] loop1: detected capacity change from 0 to 8 [ 327.062734][T12514] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 327.110916][T12514] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 327.147190][T12514] F2FS-fs (loop1): Unable to read 2th superblock 17:41:50 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:50 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8e042, 0x0) 17:41:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 327.363214][T12530] loop2: detected capacity change from 0 to 87 [ 327.389393][ T26] audit: type=1804 audit(1628271710.297:82): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/194/file1/bus" dev="sda1" ino=14687 res=1 errno=0 [ 327.441775][ T26] audit: type=1800 audit(1628271710.297:83): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14687 res=0 errno=0 [ 327.486549][T12534] loop1: detected capacity change from 0 to 8 [ 327.564586][T12534] F2FS-fs (loop1): Invalid log blocks per segment (0) [ 327.579420][T12534] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 327.597086][T12534] F2FS-fs (loop1): Unable to read 2th superblock [ 327.616971][T12501] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 327.643149][T12501] team0: Port device team_slave_0 added [ 327.660686][T12506] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 328.065581][T12506] team0: Port device team_slave_0 removed 17:41:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2}, {0x6}]}) 17:41:51 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:51 executing program 4: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20}, {0x6}]}) 17:41:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 328.304374][T12547] loop1: detected capacity change from 0 to 8 [ 328.344129][ T26] audit: type=1326 audit(1628271711.247:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12542 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 [ 328.460195][T12554] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:41:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:51 executing program 0: socket(0x10, 0x3, 0xfffffffd) [ 328.586125][ T26] audit: type=1326 audit(1628271711.487:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12544 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 17:41:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = memfd_create(&(0x7f00000001c0)='\x85bfi@\x8bSx\a\x00\x00\x00\x00\x00\x00\x00 %\t:\x97>\xb4\xa7\xe1\x80\x84\xc5V\x17)\x94P\x85\xbbj\xea\xebd\x8d3\x97h\x8d\x7f\x90\x06\x00\x00\x00\x87\xef\xe2\xf3\xe4\x84\x18\x8bd\xc4h\xa55\x9aT[\xd6\x8eJ\x83;\x15#v\xea\xa2@K\xf81?\v\xe3j\x99\x04/?\xe9\xb3\x98h\nd\xf7\x84\x04\x0e\xb5y\x8d\xaa\xf7\xc9\x9e\xce\xd1\x9c)\xa4\xb7-\x9d\xc5\xbb\xc3x\xc6*\x86\x8a 0\xb3\xcai\xed\x0f\xc1S\xff\xba4\xf9~\x90i\xd2\xe0\xcb\xf8\xf1T\x8b\xa7\xbd\xea\bC \x03\xe7\x1d\x04\xe6\xfeX\x05\x1f\xaa\x8a\xf4\xba\x1b\xadc\x0e\xa9\xcd\x9f', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r0, r2, 0x0, 0x100000000002) [ 328.654747][T12560] loop2: detected capacity change from 0 to 87 [ 328.711288][ T26] audit: type=1804 audit(1628271711.617:86): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/195/bus" dev="sda1" ino=14242 res=1 errno=0 [ 328.711369][ T26] audit: type=1800 audit(1628271711.617:87): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14242 res=0 errno=0 [ 328.746572][T12554] team0: Port device team_slave_0 added 17:41:51 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @func]}, {0x0, [0x0]}}, 0x0, 0x37}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 328.789289][T12556] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:41:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 328.832601][T12570] loop1: detected capacity change from 0 to 8 17:41:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000190004"], 0x2c}}, 0x0) [ 329.219869][T12583] ptrace attach of "/root/syz-executor.0"[12582] was attempted by "/root/syz-executor.0"[12583] [ 329.297762][T12586] loop1: detected capacity change from 0 to 8 [ 329.471177][T12556] team0: Port device team_slave_0 removed 17:41:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}], 0x10) 17:41:52 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x8936, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default}}) 17:41:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 329.699200][T12603] loop2: detected capacity change from 0 to 87 [ 329.724918][T12604] loop1: detected capacity change from 0 to 8 17:41:52 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 329.774714][ T26] audit: type=1804 audit(1628271712.677:88): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/196/bus" dev="sda1" ino=14695 res=1 errno=0 17:41:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) [ 329.839177][T12614] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 330.004611][ T26] audit: type=1800 audit(1628271712.717:89): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14695 res=0 errno=0 17:41:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 330.223718][T12614] team0: Port device team_slave_0 added [ 330.285391][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:41:53 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 17:41:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 330.326176][T12628] loop1: detected capacity change from 0 to 8 17:41:53 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 330.483361][T12635] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 330.518132][T12635] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:41:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x300}, 0x0) 17:41:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 330.636330][T12642] loop1: detected capacity change from 0 to 8 17:41:53 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) 17:41:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014b00)) [ 330.777093][T12653] loop2: detected capacity change from 0 to 87 [ 330.841731][ T26] audit: type=1804 audit(1628271713.747:90): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/197/bus" dev="sda1" ino=14673 res=1 errno=0 17:41:53 executing program 0: r0 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r1}, 0x8) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = fsmount(r1, 0x1, 0x11) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)=',\x00', 0x0, r0) socket(0x6, 0x2, 0x401) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x2b9, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default, 0x3}, 0x0, 0x0, 0x0, 0xfe80}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r7}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x68, r5, 0x8fc8979809c97ceb, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x68}}, 0x0) [ 330.944950][T12660] tmpfs: Bad value for 'mpol' [ 330.971536][T12660] tmpfs: Bad value for 'mpol' [ 330.979380][ T26] audit: type=1800 audit(1628271713.747:91): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14673 res=0 errno=0 17:41:54 executing program 4: r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsmount(r0, 0x0, 0x0) 17:41:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014b00)) 17:41:54 executing program 4: r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 17:41:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014b00)) 17:41:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 331.827238][T12635] team0: Port device team_slave_0 removed 17:41:54 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="eb33"], 0x68}}, 0x0) 17:41:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}], 0x0, &(0x7f0000014b00)) 17:41:54 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x210100, 0x0) [ 332.004059][T12686] loop1: detected capacity change from 0 to 4 [ 332.021794][T12688] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 332.029014][T12687] FAT-fs (loop2): bogus number of reserved sectors 17:41:54 executing program 4: socketpair(0x25, 0x3, 0x300, &(0x7f0000000000)) [ 332.061905][T12688] team0: Port device team_slave_0 added [ 332.073503][T12686] F2FS-fs (loop1): Unable to read 1th superblock [ 332.081207][T12687] FAT-fs (loop2): Can't find a valid FAT filesystem [ 332.085476][ T9616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:41:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28}, {0x6}]}) [ 332.106183][T12686] F2FS-fs (loop1): Unable to read 2th superblock [ 332.131106][T12695] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 332.132626][ T26] audit: type=1804 audit(1628271715.037:92): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/198/file1/bus" dev="sda1" ino=14680 res=1 errno=0 17:41:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r1, r0, 0x0, 0x800000000007) 17:41:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}], 0x0, &(0x7f0000014b00)) [ 332.323914][ T26] audit: type=1800 audit(1628271715.067:93): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14680 res=0 errno=0 17:41:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 332.597437][T12712] loop1: detected capacity change from 0 to 4 [ 332.625200][T12712] F2FS-fs (loop1): Unable to read 1th superblock [ 332.631971][T12712] F2FS-fs (loop1): Unable to read 2th superblock 17:41:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default, 0x3}}) 17:41:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 332.977573][T12695] team0: Port device team_slave_0 removed 17:41:55 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}], 0x0, &(0x7f0000014b00)) 17:41:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 17:41:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:55 executing program 0: r0 = mq_open(&(0x7f0000000100)='\x99\x00\x89\x00 \x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x1, &(0x7f00000000c0)) mq_open(&(0x7f0000000000)='\xc6\x00', 0x40, 0x2, &(0x7f0000000080)={0x7fff, 0x8, 0x7, 0x8ccf}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x6a6300039442e8b2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000001440), 0xfff, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000001c00)='/dev/vcs#\x00', &(0x7f0000001c40)='./file0\x00', r2) mq_timedsend(r1, &(0x7f0000000140)="94746c917dbcbe28cf98e859646e05b4b4f8cf0e441906706e1ea8a0b285991c19fd4ee01dfa3355b64fa1d602104967428a4afa761be880dbd8e6828cd99a953ade3390236ed61b66fac9dbc9fc1a7a0ab0be2fb01e3c6b64c299074155ba3b43f7343e129464d63e7c3d22393dfb125f368deb7757a48e2d869b3027fff50650abe2693c318a74fb3c7d4461eea2cc090181a86c", 0x95, 0x5, 0x0) [ 333.152590][T12732] loop1: detected capacity change from 0 to 4 [ 333.167681][T12731] FAT-fs (loop2): bogus number of reserved sectors [ 333.175965][T12733] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 333.184837][T12731] FAT-fs (loop2): Can't find a valid FAT filesystem [ 333.200850][T12732] F2FS-fs (loop1): Unable to read 1th superblock [ 333.207816][T12732] F2FS-fs (loop1): Unable to read 2th superblock [ 333.224192][T12733] team0: Port device team_slave_0 added [ 333.233196][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:41:56 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x3c}, {0x6}]}) 17:41:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x9e, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default, 0x3}, 0x0, 0x0, 0x0, 0xfe80}) [ 333.250465][T12733] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 333.299088][ T26] audit: type=1804 audit(1628271716.207:94): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/199/file1/bus" dev="sda1" ino=14717 res=1 errno=0 17:41:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0}], 0x0, &(0x7f0000014b00)) [ 333.495322][ T26] audit: type=1800 audit(1628271716.227:95): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14717 res=0 errno=0 [ 333.656496][ T26] audit: type=1326 audit(1628271716.457:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12748 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 17:41:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x200086, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="202002000a2a04001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="08000a007c97c2a34df97305298fa3", @ANYRES32=0x0], 0x4c}}, 0x0) [ 333.710099][T12754] loop1: detected capacity change from 0 to 4 [ 333.785465][T12754] F2FS-fs (loop1): Unable to read 1th superblock [ 333.830425][T12754] F2FS-fs (loop1): Unable to read 2th superblock 17:41:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0}], 0x0, &(0x7f0000014b00)) 17:41:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 334.255078][T12766] loop1: detected capacity change from 0 to 4 [ 334.310277][T12766] F2FS-fs (loop1): Unable to read 1th superblock [ 334.333828][T12768] FAT-fs (loop2): bogus number of reserved sectors [ 334.346505][T12766] F2FS-fs (loop1): Unable to read 2th superblock [ 334.361276][T12768] FAT-fs (loop2): Can't find a valid FAT filesystem [ 334.417202][ T26] audit: type=1804 audit(1628271717.317:97): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/200/file1/bus" dev="sda1" ino=14721 res=1 errno=0 [ 334.794626][T12733] team0: Port device team_slave_0 removed 17:41:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:57 executing program 0: fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) 17:41:57 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:41:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0}], 0x0, &(0x7f0000014b00)) 17:41:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default}, 0x0, 0x0, 0x0, 0x1000000}) 17:41:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:41:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c000100000001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000000004000000"], 0xfffffdef}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x110, r2, 0x8fc8979809c97ceb, 0x0, 0x0, {}, [{{0x6}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0xfffffffffffffd16}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x3}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x110}}, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) [ 335.273906][T12800] loop1: detected capacity change from 0 to 4 17:41:58 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 335.351737][T12803] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 335.379120][T12800] F2FS-fs (loop1): Unable to read 1th superblock [ 335.421115][T12800] F2FS-fs (loop1): Unable to read 2th superblock 17:41:58 executing program 4: pselect6(0x9, &(0x7f0000000440), &(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000040), 0x8}) [ 335.574328][T12803] team0: Port device team_slave_0 added [ 335.574658][T12815] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:41:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 335.620903][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 335.620920][ T26] audit: type=1804 audit(1628271718.527:99): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/201/file1/bus" dev="sda1" ino=14717 res=1 errno=0 [ 335.792004][T12799] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 335.825939][ T26] audit: type=1800 audit(1628271718.527:100): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14717 res=0 errno=0 [ 335.917800][T12828] loop1: detected capacity change from 0 to 8 [ 335.961252][T12818] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:41:58 executing program 4: r0 = fsopen(&(0x7f0000000040)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 336.021110][T12828] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 336.077029][T12828] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 336.184614][T12828] F2FS-fs (loop1): Unable to read 2th superblock 17:41:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x80000001, 0x4) 17:41:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:41:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:41:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x8, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @notify_peers_interval}]}}, {{0x8}, {0x4, 0x2, 0x0, 0x1, [{0x0, 0x1, @lb_tx_hash_to_port_mapping}, {0x0, 0x1, @lb_hash_stats}, {0x0, 0x1, @name={{}, {}, {0x0, 0x4, 'activebackup\x00'}}}, {0x0, 0x1, @user_linkup}, {0x0, 0x1, @priority}, {0x0, 0x1, @lb_hash_stats}]}}]}, 0xfffffdef}}, 0x0) 17:41:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 336.643865][T12799] team0: Port device team_slave_0 removed 17:41:59 executing program 0: r0 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r1}, 0x8) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = fsmount(r1, 0x1, 0x11) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)=',\x00', 0x0, r0) socket(0x6, 0x2, 0x401) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x9e, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default, 0x3}, 0x0, 0x0, 0x0, 0xfe80}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000001580)={r7}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x68, r5, 0x8fc8979809c97ceb, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}]}, 0x68}}, 0x0) 17:41:59 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 336.806359][T12855] loop1: detected capacity change from 0 to 8 [ 336.840636][ T26] audit: type=1804 audit(1628271719.747:101): pid=12854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/202/file1/bus" dev="sda1" ino=14732 res=1 errno=0 [ 336.865028][T12855] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:41:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f00002c4000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d01, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:41:59 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x80000000}, 0x8) [ 336.965246][T12862] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 337.019376][T12855] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 337.075756][T12855] F2FS-fs (loop1): Unable to read 2th superblock [ 337.104833][ T26] audit: type=1800 audit(1628271719.747:102): pid=12854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14732 res=0 errno=0 17:42:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 337.300697][T12862] team0: Port device team_slave_0 added 17:42:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0xfe80, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default}}) [ 337.381741][T12865] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:00 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 337.462190][T12876] loop1: detected capacity change from 0 to 8 [ 337.531579][T12876] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 337.575478][T12876] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 17:42:00 executing program 4: socketpair(0x10, 0x2, 0x7, &(0x7f0000000040)) [ 337.638363][T12876] F2FS-fs (loop1): Unable to read 2th superblock [ 337.917837][T12865] team0: Port device team_slave_0 removed 17:42:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x541b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @local}, @xdp, @ax25={0x3, @default}}) 17:42:00 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:00 executing program 0: r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x2, 0x2, 0x4000, 0x0) [ 338.159599][ T26] audit: type=1804 audit(1628271721.068:103): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/203/file1/bus" dev="sda1" ino=14751 res=1 errno=0 [ 338.174687][T12908] loop1: detected capacity change from 0 to 8 17:42:01 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x541b, 0x0) [ 338.273884][T12908] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 338.288767][ T26] audit: type=1800 audit(1628271721.108:104): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14751 res=0 errno=0 17:42:01 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0xebd66ede27cbc41) [ 338.350008][T12908] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 338.366482][T12914] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 338.402857][T12908] F2FS-fs (loop1): Unable to read 2th superblock [ 338.541786][T12914] team0: Port device team_slave_0 added 17:42:01 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='@\x00', &(0x7f0000000200)='\x99\x00', 0x0) 17:42:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 338.697559][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.724966][T12917] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 338.828032][T12930] loop1: detected capacity change from 0 to 8 [ 338.867355][T12930] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:42:01 executing program 4: fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) [ 338.899298][T12930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 338.927090][T12930] F2FS-fs (loop1): Unable to read 2th superblock [ 339.359685][ T20] Bluetooth: hci0: command 0x0406 tx timeout [ 339.375317][ T20] Bluetooth: hci1: command 0x0406 tx timeout [ 339.383504][T12917] team0: Port device team_slave_0 removed [ 339.419185][ T20] Bluetooth: hci2: command 0x0406 tx timeout [ 339.425264][ T20] Bluetooth: hci3: command 0x0406 tx timeout [ 339.432651][ T20] Bluetooth: hci4: command 0x0406 tx timeout [ 339.440335][ T20] Bluetooth: hci5: command 0x0406 tx timeout 17:42:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:02 executing program 4: r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 17:42:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:02 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x400454d9, 0x0) [ 339.601809][T12950] loop2: detected capacity change from 0 to 87 [ 339.615723][T12951] loop1: detected capacity change from 0 to 8 [ 339.665936][T12950] FAT-fs (loop2): bogus number of reserved sectors [ 339.676593][T12951] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 339.711492][T12950] FAT-fs (loop2): Can't find a valid FAT filesystem [ 339.733756][T12959] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 339.751099][T12951] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 17:42:02 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="ad4300000000000008000200000004000180"], 0x18}}, 0x0) [ 339.760877][ T26] audit: type=1804 audit(1628271722.668:105): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/204/file1/bus" dev="sda1" ino=14762 res=1 errno=0 17:42:02 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 339.822052][T12951] F2FS-fs (loop1): Unable to read 2th superblock [ 339.907610][ T26] audit: type=1800 audit(1628271722.668:106): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14762 res=0 errno=0 17:42:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 340.025877][T12959] team0: Port device team_slave_0 added [ 340.074294][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.092005][T12961] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 340.210035][T12973] loop1: detected capacity change from 0 to 8 [ 340.252869][T12973] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.270194][T12973] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 340.293222][T12973] F2FS-fs (loop1): Unable to read 2th superblock 17:42:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 340.550406][T12981] loop1: detected capacity change from 0 to 8 [ 340.592378][T12981] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 340.595273][T12986] loop2: detected capacity change from 0 to 87 [ 340.613480][T12981] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 340.636318][T12981] F2FS-fs (loop1): Unable to read 2th superblock [ 340.652154][T12986] FAT-fs (loop2): bogus number of reserved sectors [ 340.667837][T12986] FAT-fs (loop2): Can't find a valid FAT filesystem [ 340.717276][ T26] audit: type=1804 audit(1628271723.618:107): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/205/file1/bus" dev="sda1" ino=14765 res=1 errno=0 [ 340.809990][ T26] audit: type=1800 audit(1628271723.658:108): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14765 res=0 errno=0 [ 340.833667][T12961] team0: Port device team_slave_0 removed 17:42:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:03 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x30, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000001}, 0x44000) socketpair(0x1, 0x0, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002a80)={&(0x7f0000002a40)='rpcgss_oid_to_mech\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000004600)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)=""/4080, 0x1000}, {&(0x7f0000001740)=""/190, 0xffffff81}, {&(0x7f0000000080)=""/115, 0x73}], 0x3}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000900)={0x3, 0x80, 0x0, 0x49, 0x0, 0x4, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x6, 0x2cdbc43b, 0x0, 0xcc6, 0x0, 0x8, 0x0, 0xffffffffffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x42, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 17:42:03 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/573], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xffffff88, &(0x7f00000000c0)="b9ff0300290d698cb89e40f086dd1fffffff00008700638977", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 341.185988][T13001] loop1: detected capacity change from 0 to 8 [ 341.324826][T13001] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 341.389985][T13014] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 341.430750][T13001] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 17:42:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0}, 0x10) close(r2) [ 341.480391][T13001] F2FS-fs (loop1): Unable to read 2th superblock 17:42:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 341.521374][T13014] team0: Port device team_slave_0 added 17:42:04 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 341.569586][T13015] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009", 0x9, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x0) close(r2) [ 341.812948][T13028] loop1: detected capacity change from 0 to 8 [ 341.813803][T13026] loop2: detected capacity change from 0 to 87 17:42:04 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe000000, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001d008105e00f80ecdb4cb9f207a07e4f1e000000880309fb0a0002000612da1b40d805000374c50083b8", 0x2e}], 0x1}, 0x0) [ 341.861082][T13028] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 341.870566][T13028] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 341.879067][T13028] F2FS-fs (loop1): Unable to read 2th superblock [ 341.903019][ T26] audit: type=1804 audit(1628271724.808:109): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/206/bus" dev="sda1" ino=14307 res=1 errno=0 17:42:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009", 0x9, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:04 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 342.032235][ T26] audit: type=1800 audit(1628271724.838:110): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14307 res=0 errno=0 [ 342.189303][T13047] loop1: detected capacity change from 0 to 8 [ 342.225924][T13047] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 342.246158][T13047] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 342.272854][T13047] F2FS-fs (loop1): Unable to read 2th superblock [ 342.317254][T13015] team0: Port device team_slave_0 removed [ 342.363968][T13042] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 17:42:05 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009", 0x9, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:05 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$TCSETA(r0, 0x5451, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x14}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000022c0), &(0x7f0000000200)=0x10) memfd_create(&(0x7f0000002480)='((\x04\x00\x00\x00[\x99\xca7\xaf.\f\x8c\xbd\xba\xdd\x05\x1a\x1b\xb7\xf4\xf76!\xc0\b(\xf8yW\xbb\xd2\xc6y\xa9\x1c\xcd\xad\x1d`\a\xbcJ\bs\xfc7m\x95x\xaf\xcfI\xad\xca\xb5?oY\xd8\x00\b\xb5\xd2\xdaj\xeb\x15\x8fl\xd3\xf6=A\tj\xfeU\x8f\n\xb7\'\xf0>fp\x7f\xa3\xb5\xca\xd0\xb3\x99Q\x1d\x829\xc8\xb6\xa2\x8e+_\xeb\x84\xb3R1\'\xcd\x8c\x12%\x83hL\xa0\xdd\xc3\xfeR\xe5\xce\xfb\xff\a\x8d_', 0x3) r1 = semget$private(0x0, 0x4, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xffffffffffffffff, r4, 0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc, 0x9, &(0x7f0000000740)=[{&(0x7f00000000c0)="ef33b8761ecbca3f101bcd0bed89aeaef39a", 0x12, 0x2}, {&(0x7f0000000240)="e476b2afa009a121942f6a51e6755fd41408aa7dcb8a8974f98c5b1e197beada792ef8ee797ba25633cd2f748a6f507c516cff469eefcb195b4524aab728f033b82304a99dfe0cf7b514aeb4a6f63ff20723e72c327de4caf9162c54e8caeba12ac57dc9c3e55d43b55d00cbe366d10f36f88e0c3fdc212c99f1f5573dd34bddc709a11a0e11854c394d778fa7888513094bd025ec12d26b3df26c03e933f2b01bb5835db521ae7e25170e900817ca90ad6775c8d030488885e9853a49d520ee812ba5d6c3ec8ad61360dc8d0339d4fcbed3488650ab64119bf9047e514d5c43ed662a6a58cd7cb25f6dd1354910cf26e5e10dabccdcb82d", 0xf8, 0xc7}, {&(0x7f0000000180)="f5ca7da1c3badde5f0cc7892ca6b7e83d9933d7db59873f942be1a27139b812d9815234b495ac502851458685d4271", 0x2f, 0x89be}, {&(0x7f0000000340)="122de32aa45a58729f88461685679ac96ec158c4248757f81586ea04bc2c821f85857d5ef911eab63e216c687958fb973f7c57051b2e71837b44cd5a0e0f45daf013524234b1c93d6a9f9b66979360ca77ba3508f2c060400756154c39acbefaa792fbb118c61e088fab98cd8b76cf40434a9311006bd087d70445", 0x7b, 0x80000000}, {&(0x7f0000002540)="cb40346adb5f3434fdbcdabf1c715ef89ca6116d53b971c1403092f72265e2c4c824fee13aa87cfc67be1898e2383b5f97bba3e58bbd1da2bb1c44efc98a2e3d1ee8f126719fe257d4349b0ac62e7c85811865483b70d4489cdbfce949e4ac1175d5c87e0953d7c2d7bdf30116707e3cda7f7ecadcb2338e9198e76949d8aeef3d8b0540613563c3c1c8460229fd091929ebcc5bdccd8302e6d3dd2ab0c94a486d6570ce9e2f175b470ab035974669ea0b0291929dbf4dd0b73ca256545a32e301bf82b00006a2a92c72b1697cdb45116f2864de", 0xd4, 0x963}, {&(0x7f0000000400)="5375ec5b47518028bb04f5b761977f31f480ff874b044d1ee63ffa424dc33831494a4b01ae43a61b89125962748124cde680b7692b106902ab08f4631c5261dadd5008d630206be196e039d1b353084b0c9a850bd2ef7fb31018dd50a89b3907981e270c98eb97d305fbe5527302bb6782c8aae06106b319b0ba67327f49265ffdf6e7238e", 0x85, 0x100000000}, {&(0x7f00000004c0)="b10fdc5a6ab5c2ddb70b810800000016c40ade05620c024d5a73a09ed2eeb93bad4a3a0c9062c7a1a324290d35343cc5e9994bbc6289b5b3630822242ed86fc3ce40a9b78060cdeeb232fdf0bd3cbfa5482b7c653fbefa8da8219fabeaf5cd14f424cd4c7ae839592a1b82152bec7b4d3e009aac6c9bc8d3c554dbe6b6179a5a84eb5583bd75e030d7bb729025e3398c3c56f5e1db936da8ed92c3d9639fff0ad5", 0xa1, 0xc}, {&(0x7f0000002200)="47246cd76e9d4fdbab8f25b3fd6ac999e29f4bbcd8ff03fd8000000009394cdf0bb762ade84000a91e85edd05562f0c2bbf746db835bd3822e76854e304cfd91a9b1fb1996677f0b17deb3cc2362e2e71b0c811c1903e3c17bd2d05bb3bd07fdd8816af3bff1b55b3e4f5f5651e8488a0929ed1350972270ef1d5da726cdda64d0f017f9d991c80a1f39846de0f91efccbffa3f235243caabda9fa0710eca485d41a62c8363854474de48d526ca67509bac239", 0xb3, 0x5}, {&(0x7f0000000640)="2eb929ec32f8b0fd20e54f8291b1786ab8874fb49a5d03bcec1c84d0651a055e099a6e6615272b574bd51605e0acc2fe051284b1a41f8258cec55f4a89b7bb31bbf0f42dd188c18a4afa901066a24a062da2034003e4dc1c00024667fef1151ab4412a5da8360658f2c0364d4256b9218d6cb08cd2a8cc2a6c82b38394165087cd08c6bb586549d880da1205ed57a0663ee0a137401ed11f0cb378c0d04f65dfacf533c3547b0ae7a3d8fd5f6a354e804ceac7147672192be345d10ffa8c8b5ebb40ed3121193e5c313920ea1c2d43df9c10b73eaa2a0d6b2920a7f8b9d5a20ad05773dbde7070cdba0a74b41787d7106edcea9d", 0xf4, 0x7ff}], 0x201000, &(0x7f0000002500)=ANY=[]) mknod$loop(&(0x7f0000002380)='./file0\x00', 0x8, 0x0) ioctl$TCSETA(r2, 0x5451, 0x0) shmctl$IPC_RMID(r1, 0x0) signalfd(r3, &(0x7f00000021c0)={[0x6]}, 0x8) pipe(&(0x7f0000000040)) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) 17:42:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 342.735324][T13061] loop1: detected capacity change from 0 to 8 [ 342.764533][T13062] loop0: detected capacity change from 0 to 264192 [ 342.806126][T13066] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:05 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 342.902665][T13061] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 342.933272][T13066] team0: Port device team_slave_0 added [ 342.943120][T13072] loop0: detected capacity change from 0 to 264192 [ 342.988131][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.019689][T13061] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 17:42:06 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x23, 0xfb, 0x0, 0x0, 0x0, 0x80810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, @perf_config_ext={0x0, 0x7}, 0xc2, 0x8, 0x37, 0x7, 0x8001, 0x1, 0xbf55, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000002d008108040f8100db5cb90500f0ffffffffffff00000000d9d38f000000003808000100030000000000", 0x2e}], 0x1}, 0x0) close(r1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00'}, 0x10) [ 343.083683][T13061] F2FS-fs (loop1): Unable to read 2th superblock [ 343.147857][T13082] loop2: detected capacity change from 0 to 87 [ 343.179257][T13082] FAT-fs (loop2): bogus number of reserved sectors [ 343.205965][T13082] FAT-fs (loop2): Can't find a valid FAT filesystem [ 343.259078][ T26] audit: type=1804 audit(1628271726.168:111): pid=13090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/207/file1/bus" dev="sda1" ino=14757 res=1 errno=0 [ 343.306247][T13091] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.335166][ T26] audit: type=1800 audit(1628271726.228:112): pid=13090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14757 res=0 errno=0 17:42:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b000900000003", 0xd, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:06 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:42:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:06 executing program 0: socketpair(0x11, 0xa, 0xffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb08b9cca7480af426000000e3bd6efb440009000e000a000f0000003f8000001201", 0x2e}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000380)=""/23, 0x17}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000540)=""/36, 0x24}], 0x9}, 0x60010121) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a0313", 0x30}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) sendmsg(r0, &(0x7f0000003140)={&(0x7f0000000880)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="79398de72ef376cf90ffc9c0c2c0ae1737db96dd2b3c18cf84cfbf9d750e05f53ebef1b858c48ee78a6c134008a0bd4dfedfe1a535c598ebff544536879d6d34dc100f09d787a682f0c72353d87a67cb543a73628ce858eb2f", 0x59}, {&(0x7f0000001980)="4b63630db2a3e6e4f6f48fc637a9fda6d72d4ec662470ede988a38916dd3cafe5fab5c68a35fda6eebfabe12aa5c0d12a19b596ba99041868d07659be47a922118989c40d1140ebc6e38c67fb2250a057e34b85c802892203d5dfb742aebd5b0fe68017c60176bfb19a4e4b9a0720e4c2cbd3229b6003182684c5898b0c65d1711011c77b525da762764ae7e37c67c7156", 0x91}, {&(0x7f0000001a40)="0e21dc40eab18c17fd41a0518cbed99355a5cb2d9bf237c8a5b7e7e4eb1d87090f570b1e227a9a5342d1eca7a1448cfc13fbca4d22795e5b4e9e74e95014767ca4e85932845e523c55738db999001d38474cf3160be8a4ccf9d5b1ea21", 0x5d}, {&(0x7f0000001ac0)="6952fd481d8d99e97e761e228d52727751a739c1aee2ae57b8b8", 0x1a}, {&(0x7f0000001b00)="70e527921b743a7f278d4991e78d0e0455c9666a82cc2ec64d52f41b0c96903a1ab9f1231441c142df0d6c3c93a979c5cb1cefdd58d2fcd5078c6e739eee84588b8af772e1aab9b2e1fca7f2414bcc611401b2e2d007f314325b0a662348468280f07fad58554dfa9e16e14970a4c268af66da767e28f06b083a1c54584fc75a4b6843a9c5f36833f03753e17e49def0cafacd8fbdee98eae1b91f1a2c67e9f58b2523775f6f849ee7ae93129e", 0xad}, {&(0x7f0000001bc0)="3f614a6bdbc94618df3d47d8427f44c2745947e14bfb601d4cd7b8ec759cccdfa8ded0729459f15c16913315db381ec4a88c06c71012533518440420d827a1ed04ee7a53f73a2b3c935c29e94836e0e23c6aaa53e78564fec7b23227775608d6b26624e584d3cd", 0x67}, {&(0x7f0000001c40)="18b6a42795afc2a2c8464c2701f3", 0xe}, {&(0x7f0000001c80)="4961431e2da74e9601331d1949e862fd345fe681f42d96702a51ba5fe52ef2bcf4483039e8bb983d9a58c5a1ae42a83350f0e722faafdb64f9f0afa07d4dc4c9dd3021a7f1dee893df88c74048b8b1c13d57", 0x52}, {&(0x7f0000001d00)="c11b0f6ab705b5f7d1a31f97e77a6860f68b3a57b88161a0fa70ea79eb83c712a9267af521de2cf6e555e30bf0dd6552f607853be35a892983a04e0620eac9a49a69184b9c5e31937077ee0d355a9145dfec0f6dbcc123c4cccb0e7f69e7", 0x5e}], 0xa, &(0x7f0000001e40)=[{0x40, 0x10c, 0x9, "c4dd9e3ce1ab933dad466de1eabc08bd12bf740dfed15f155da6d6e79efbd5efd8246e387da61d34a7de5d2300"}, {0x68, 0xff, 0x1000, "2b5149638b435ec195ccfae914396333ea982a3227fb4c64b32ec1b8e9ff7b3aa6e2d2e074528174d466a4e818631369429385aa75860fddaacee32a580e9345c93b8c391adefeec78c31645e6c51f75edcf41e0d674c15b"}, {0x1010, 0x10f, 0xaf, "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"}, {0x48, 0x112, 0x4, "aadd1e24dfc0fc0d8265cfe37a0ff1f2776aa7a8e3f995ba5cc7cc8b79b7a434d4cb678d910872d618120865a0bf7dd6d2ec9a345a55"}, {0xc0, 0x103, 0x0, "90da2e942344526a6c7574c001ba5ae79e6a289d7108fcf7cfe61cc5f0c7fbb60d33ec0f7bbde3c997ed89c06e64a856f37cf57c22170dcf5b86081e7ba7ecd2ebece49320ed08d83304e91e87bf8ebe2c84eda884e1071e66111d565946a256c98bf355649cacd34533982d72c839e5fb7ef7a7804a081cfb0540fdd96396c54aab480ee1626643a8c6f73968fffc2fb44ab1c3cd1d00a105f3a824e02db9a2475cfcf21dcae4ff9aa67afb27"}, {0x48, 0x10d, 0x7fffffff, "4bd90a6fef95bac9763021a3d1d50b556563eba2133cdc13d82f70b274cd266afd7f997449af33f07208e9e252d6ad0735b47b"}, {0xd8, 0x113, 0xab0b, "4073117269c2e9d68125f0e85c15d73208cd3438bf0db76c08c37c5ea2b9e6f2a960da62a28b9a924500b2bb605e452b43f7fa7e9512874cb9a82a2835beae29e86094323369322bb74a088b2aafb92edf7f424fc5436939adc4112639f6f7e76e995449dcb315ac2c3eb7e02be35723489bb608843489afee119366fabccb1f61a1e2706fc21bb1ea4657d83594d318f7a7e2f7ef0c457ad30fe7b7aea59277d9d29d2be999c2d475b0c4d54d61f31bd64634f6b14a0a143fe600cd6e36ad054a2234653dff5e"}], 0x12e0}, 0x4000085) r4 = socket$kcm(0xa, 0x0, 0x11) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000180)}, 0x0) [ 343.495105][T13101] loop1: detected capacity change from 0 to 8 [ 343.582416][T13103] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 343.634702][T13101] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 343.709629][T13114] loop2: detected capacity change from 0 to 87 [ 343.749378][T13101] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 343.853284][T13101] F2FS-fs (loop1): Unable to read 2th superblock [ 343.905566][ T26] audit: type=1800 audit(1628271726.808:113): pid=13120 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14793 res=0 errno=0 17:42:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b000900000003", 0xd, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 343.995238][ T26] audit: type=1804 audit(1628271726.858:114): pid=13118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/208/bus" dev="sda1" ino=14793 res=1 errno=0 17:42:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:42:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 344.220662][T13129] loop1: detected capacity change from 0 to 8 [ 344.268856][T13129] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 344.293259][T13129] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 344.364451][T13129] F2FS-fs (loop1): Unable to read 2th superblock [ 344.396977][T13139] loop2: detected capacity change from 0 to 87 [ 344.467567][T13139] FAT-fs (loop2): bogus number of reserved sectors [ 344.506980][T13139] FAT-fs (loop2): Can't find a valid FAT filesystem 17:42:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b000900000003", 0xd, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:07 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x3, 0x2, 0x5, 0x0, 0x1, 0x2000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000700)={0xffffffffffffffff, r1}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x2, 0x0, &(0x7f0000000340)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0xf}, 0x10}, 0x78) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 344.510703][ T26] audit: type=1804 audit(1628271727.408:115): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/209/file1/bus" dev="sda1" ino=14796 res=1 errno=0 [ 344.669869][ T26] audit: type=1800 audit(1628271727.458:116): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14796 res=0 errno=0 [ 344.735672][T13150] loop1: detected capacity change from 0 to 8 [ 344.800147][T13150] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 344.840354][T13150] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 344.849606][T13150] F2FS-fs (loop1): Unable to read 2th superblock 17:42:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000", 0xf, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 345.206488][T13158] loop1: detected capacity change from 0 to 8 [ 345.225358][T13103] team0: Port device team_slave_0 removed [ 345.239736][T13103] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 345.262267][T13158] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 345.270372][T13108] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 345.287658][T13113] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 345.311986][T13158] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 345.346522][T13158] F2FS-fs (loop1): Unable to read 2th superblock [ 345.741820][T13113] team0: Port device team_slave_0 removed [ 345.760626][T13111] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 345.774409][T13152] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 17:42:08 executing program 0: socketpair(0x11, 0xa, 0xffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0xe00, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb08b9cca7480af426000000e3bd6efb440009000e000a000f0000003f8000001201", 0x2e}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000380)=""/23, 0x17}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000540)=""/36, 0x24}], 0x9}, 0x60010121) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a0313", 0x30}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) sendmsg(r0, &(0x7f0000003140)={&(0x7f0000000880)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="79398de72ef376cf90ffc9c0c2c0ae1737db96dd2b3c18cf84cfbf9d750e05f53ebef1b858c48ee78a6c134008a0bd4dfedfe1a535c598ebff544536879d6d34dc100f09d787a682f0c72353d87a67cb543a73628ce858eb2f", 0x59}, {&(0x7f0000001980)="4b63630db2a3e6e4f6f48fc637a9fda6d72d4ec662470ede988a38916dd3cafe5fab5c68a35fda6eebfabe12aa5c0d12a19b596ba99041868d07659be47a922118989c40d1140ebc6e38c67fb2250a057e34b85c802892203d5dfb742aebd5b0fe68017c60176bfb19a4e4b9a0720e4c2cbd3229b6003182684c5898b0c65d1711011c77b525da762764ae7e37c67c7156", 0x91}, {&(0x7f0000001a40)="0e21dc40eab18c17fd41a0518cbed99355a5cb2d9bf237c8a5b7e7e4eb1d87090f570b1e227a9a5342d1eca7a1448cfc13fbca4d22795e5b4e9e74e95014767ca4e85932845e523c55738db999001d38474cf3160be8a4ccf9d5b1ea21", 0x5d}, {&(0x7f0000001ac0)="6952fd481d8d99e97e761e228d52727751a739c1aee2ae57b8b8", 0x1a}, {&(0x7f0000001b00)="70e527921b743a7f278d4991e78d0e0455c9666a82cc2ec64d52f41b0c96903a1ab9f1231441c142df0d6c3c93a979c5cb1cefdd58d2fcd5078c6e739eee84588b8af772e1aab9b2e1fca7f2414bcc611401b2e2d007f314325b0a662348468280f07fad58554dfa9e16e14970a4c268af66da767e28f06b083a1c54584fc75a4b6843a9c5f36833f03753e17e49def0cafacd8fbdee98eae1b91f1a2c67e9f58b2523775f6f849ee7ae93129e", 0xad}, {&(0x7f0000001bc0)="3f614a6bdbc94618df3d47d8427f44c2745947e14bfb601d4cd7b8ec759cccdfa8ded0729459f15c16913315db381ec4a88c06c71012533518440420d827a1ed04ee7a53f73a2b3c935c29e94836e0e23c6aaa53e78564fec7b23227775608d6b26624e584d3cd", 0x67}, {&(0x7f0000001c40)="18b6a42795afc2a2c8464c2701f3", 0xe}, {&(0x7f0000001c80)="4961431e2da74e9601331d1949e862fd345fe681f42d96702a51ba5fe52ef2bcf4483039e8bb983d9a58c5a1ae42a83350f0e722faafdb64f9f0afa07d4dc4c9dd3021a7f1dee893df88c74048b8b1c13d57", 0x52}, {&(0x7f0000001d00)="c11b0f6ab705b5f7d1a31f97e77a6860f68b3a57b88161a0fa70ea79eb83c712a9267af521de2cf6e555e30bf0dd6552f607853be35a892983a04e0620eac9a49a69184b9c5e31937077ee0d355a9145dfec0f6dbcc123c4cccb0e7f69e7", 0x5e}], 0xa, &(0x7f0000001e40)=[{0x40, 0x10c, 0x9, "c4dd9e3ce1ab933dad466de1eabc08bd12bf740dfed15f155da6d6e79efbd5efd8246e387da61d34a7de5d2300"}, {0x68, 0xff, 0x1000, "2b5149638b435ec195ccfae914396333ea982a3227fb4c64b32ec1b8e9ff7b3aa6e2d2e074528174d466a4e818631369429385aa75860fddaacee32a580e9345c93b8c391adefeec78c31645e6c51f75edcf41e0d674c15b"}, {0x1010, 0x10f, 0xaf, "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"}, {0x48, 0x112, 0x4, "aadd1e24dfc0fc0d8265cfe37a0ff1f2776aa7a8e3f995ba5cc7cc8b79b7a434d4cb678d910872d618120865a0bf7dd6d2ec9a345a55"}, {0xc0, 0x103, 0x0, "90da2e942344526a6c7574c001ba5ae79e6a289d7108fcf7cfe61cc5f0c7fbb60d33ec0f7bbde3c997ed89c06e64a856f37cf57c22170dcf5b86081e7ba7ecd2ebece49320ed08d83304e91e87bf8ebe2c84eda884e1071e66111d565946a256c98bf355649cacd34533982d72c839e5fb7ef7a7804a081cfb0540fdd96396c54aab480ee1626643a8c6f73968fffc2fb44ab1c3cd1d00a105f3a824e02db9a2475cfcf21dcae4ff9aa67afb27"}, {0x48, 0x10d, 0x7fffffff, "4bd90a6fef95bac9763021a3d1d50b556563eba2133cdc13d82f70b274cd266afd7f997449af33f07208e9e252d6ad0735b47b"}, {0xd8, 0x113, 0xab0b, "4073117269c2e9d68125f0e85c15d73208cd3438bf0db76c08c37c5ea2b9e6f2a960da62a28b9a924500b2bb605e452b43f7fa7e9512874cb9a82a2835beae29e86094323369322bb74a088b2aafb92edf7f424fc5436939adc4112639f6f7e76e995449dcb315ac2c3eb7e02be35723489bb608843489afee119366fabccb1f61a1e2706fc21bb1ea4657d83594d318f7a7e2f7ef0c457ad30fe7b7aea59277d9d29d2be999c2d475b0c4d54d61f31bd64634f6b14a0a143fe600cd6e36ad054a2234653dff5e"}], 0x12e0}, 0x4000085) r4 = socket$kcm(0xa, 0x0, 0x11) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000180)}, 0x0) 17:42:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000", 0xf, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:08 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:08 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x3, 0x2, 0x5, 0x0, 0x1, 0x2000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000700)={0xffffffffffffffff, r1}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x2, 0x0, &(0x7f0000000340)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0xf}, 0x10}, 0x78) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 17:42:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 345.976911][T13182] loop2: detected capacity change from 0 to 87 [ 346.018936][T13183] loop1: detected capacity change from 0 to 8 [ 346.026521][T13185] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 346.114689][ T26] audit: type=1804 audit(1628271729.018:117): pid=13189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/210/bus" dev="sda1" ino=14796 res=1 errno=0 [ 346.136653][T13185] team0: Port device team_slave_0 added [ 346.152004][T13183] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 346.184091][T13181] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.231364][T13183] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 346.295313][T13191] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 346.317195][ T26] audit: type=1800 audit(1628271729.058:118): pid=13189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14796 res=0 errno=0 17:42:09 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 346.363468][T13183] F2FS-fs (loop1): Unable to read 2th superblock 17:42:09 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x3, 0x2, 0x5, 0x0, 0x1, 0x2000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000700)={0xffffffffffffffff, r1}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x2, 0x0, &(0x7f0000000340)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0xf}, 0x10}, 0x78) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 17:42:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000", 0xf, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 346.788399][T13210] loop1: detected capacity change from 0 to 8 17:42:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 346.850644][T13210] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 346.877142][T13210] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 346.911875][T13210] F2FS-fs (loop1): Unable to read 2th superblock [ 346.946963][T13215] loop2: detected capacity change from 0 to 87 [ 346.971850][T13215] FAT-fs (loop2): bogus number of reserved sectors [ 346.985141][T13215] FAT-fs (loop2): Can't find a valid FAT filesystem [ 347.006618][T13191] team0: Port device team_slave_0 removed 17:42:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b000900000003000000", 0x10, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 347.024876][T13188] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 347.043612][T13209] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 17:42:10 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:10 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000002000000000e3bdeefb44004f0a0e001b0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 347.120529][ T26] audit: type=1804 audit(1628271730.028:119): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/211/file1/bus" dev="sda1" ino=14804 res=1 errno=0 17:42:10 executing program 4: epoll_create1(0x6f7b18684fc007bd) [ 347.202607][ T26] audit: type=1800 audit(1628271730.028:120): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14804 res=0 errno=0 17:42:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 347.262427][T13224] loop1: detected capacity change from 0 to 8 [ 347.317777][T13224] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 347.376481][T13224] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 347.426576][T13224] F2FS-fs (loop1): Unable to read 2th superblock [ 347.436898][T13232] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 17:42:10 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:10 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x6, 0x0) [ 347.617103][T13239] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 347.691230][T13239] team0: Port device team_slave_0 added 17:42:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x9000000, &(0x7f0000000480)='./file0\x00', 0x0, 0x3f00, 0x0) 17:42:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b000900000003000000", 0x10, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 347.732747][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.767330][T13240] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:10 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 348.014241][T13250] loop1: detected capacity change from 0 to 8 [ 348.028898][T13250] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 17:42:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) [ 348.055023][T13250] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 348.083494][T13250] F2FS-fs (loop1): Unable to read 2th superblock [ 348.137343][T13257] loop2: detected capacity change from 0 to 87 17:42:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b000900000003000000", 0x10, 0x400}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 348.181998][T13257] FAT-fs (loop2): bogus number of reserved sectors [ 348.212773][T13257] FAT-fs (loop2): Can't find a valid FAT filesystem [ 348.275153][ T26] audit: type=1804 audit(1628271731.168:121): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/212/file1/bus" dev="sda1" ino=14434 res=1 errno=0 [ 348.302283][T13265] fuse: Bad value for 'fd' [ 348.326284][ T26] audit: type=1800 audit(1628271731.168:122): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14434 res=0 errno=0 17:42:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc) [ 348.455976][T13269] loop1: detected capacity change from 0 to 8 [ 348.526101][T13269] F2FS-fs (loop1): Invalid log_blocksize (0), supports only 12 [ 348.558021][T13269] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 348.603349][T13269] F2FS-fs (loop1): Unable to read 2th superblock 17:42:11 executing program 0: openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x4100, 0x0) 17:42:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000002fc0)) 17:42:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 349.029077][T13240] team0: Port device team_slave_0 removed 17:42:12 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) [ 349.180344][T13284] loop2: detected capacity change from 0 to 87 [ 349.234542][T13284] FAT-fs (loop2): bogus number of reserved sectors [ 349.267769][T13284] FAT-fs (loop2): Can't find a valid FAT filesystem 17:42:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x42, 0x0, 0x300) [ 349.280153][T13294] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 349.333422][ T26] audit: type=1804 audit(1628271732.228:123): pid=13293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/213/file1/bus" dev="sda1" ino=14823 res=1 errno=0 [ 349.396229][T13294] team0: Port device team_slave_0 added [ 349.425383][T13299] loop1: detected capacity change from 0 to 8 [ 349.465451][T13298] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 349.545748][ T26] audit: type=1800 audit(1628271732.228:124): pid=13293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14823 res=0 errno=0 [ 349.557518][T13299] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 349.635096][T13299] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 349.661496][T13299] F2FS-fs (loop1): Unable to read 2th superblock 17:42:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000002500010a00"/20, @ANYRESDEC], 0x48}}, 0x0) 17:42:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) 17:42:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 350.025208][T13314] loop1: detected capacity change from 0 to 8 [ 350.044902][T13314] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.063170][T13314] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.074036][T13298] team0: Port device team_slave_0 removed [ 350.088013][T13314] F2FS-fs (loop1): Unable to read 2th superblock [ 350.100776][T13312] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 17:42:13 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 350.127237][T13320] loop2: detected capacity change from 0 to 87 17:42:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x22, 0x0, 0x0) [ 350.211344][T13320] FAT-fs (loop2): bogus number of reserved sectors [ 350.233000][T13320] FAT-fs (loop2): Can't find a valid FAT filesystem 17:42:13 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb434921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0x54}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0x5}, 0x1c) 17:42:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11}, {0x0, 0x0, 0x860}], 0x0, &(0x7f0000014b00)) [ 350.255814][ T26] audit: type=1804 audit(1628271733.148:125): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/214/file1/bus" dev="sda1" ino=13954 res=1 errno=0 [ 350.384413][ T26] audit: type=1800 audit(1628271733.148:126): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13954 res=0 errno=0 [ 350.442537][T13336] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x34, r4, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}]}, 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0xffffffff) [ 350.500622][T13338] loop1: detected capacity change from 0 to 8 [ 350.521842][T13336] team0: Port device team_slave_0 added [ 350.573320][T13340] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 350.605160][T13338] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.630775][T13338] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.671677][T13338] F2FS-fs (loop1): Unable to read 2th superblock 17:42:13 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, 0x0) [ 350.991434][T13354] loop1: detected capacity change from 0 to 8 17:42:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x19, &(0x7f0000000500)={0x0, 0x7}, 0x8) 17:42:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, 0x0) 17:42:14 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) [ 351.228432][T13363] loop2: detected capacity change from 0 to 87 [ 351.273502][T13363] FAT-fs (loop2): bogus number of reserved sectors [ 351.282999][T13340] team0: Port device team_slave_0 removed [ 351.315980][T13363] FAT-fs (loop2): Can't find a valid FAT filesystem 17:42:14 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 351.367561][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 351.367579][ T26] audit: type=1804 audit(1628271734.258:128): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/215/file1/bus" dev="sda1" ino=14321 res=1 errno=0 17:42:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 351.412386][T13374] loop1: detected capacity change from 0 to 8 17:42:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5452, &(0x7f0000000140)={'syztnl2\x00', 0x0}) [ 351.552245][ T26] audit: type=1800 audit(1628271734.258:129): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14321 res=0 errno=0 17:42:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c", 0x11, 0x400}, {0x0, 0x0, 0x860}], 0x0, 0x0) 17:42:14 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 351.649471][ T26] audit: type=1804 audit(1628271734.368:130): pid=13346 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir807007419/syzkaller.e4xTyc/234/cgroup.controllers" dev="sda1" ino=14289 res=1 errno=0 17:42:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x34, r4, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}]}, 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0xffffffff) 17:42:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x34, r4, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}]}, 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0xffffffff) [ 351.801520][T13388] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 351.865431][T13390] loop1: detected capacity change from 0 to 8 [ 351.895821][T13388] team0: Port device team_slave_0 added [ 351.946410][T13384] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:15 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) pipe(&(0x7f00000007c0)) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5411, 0x0) unshare(0x40040400) 17:42:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000006f80)={'sit0\x00', &(0x7f0000006f00)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}) [ 352.264603][ T26] audit: type=1804 audit(1628271735.158:131): pid=13400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir455768999/syzkaller.91BTjO/215/cgroup.controllers" dev="sda1" ino=14258 res=1 errno=0 [ 352.355242][T13410] loop2: detected capacity change from 0 to 87 [ 352.429227][T13410] FAT-fs (loop2): invalid media value (0x00) [ 352.482995][T13410] FAT-fs (loop2): Can't find a valid FAT filesystem [ 352.530060][ T26] audit: type=1804 audit(1628271735.428:132): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/216/file1/bus" dev="sda1" ino=14353 res=1 errno=0 [ 352.664523][ T26] audit: type=1800 audit(1628271735.458:133): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14353 res=0 errno=0 [ 352.975120][T13384] team0: Port device team_slave_0 removed 17:42:15 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000b80)={r2}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5411, 0x0) unshare(0x40040400) 17:42:16 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:16 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x711, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 17:42:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:16 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2}}) 17:42:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89a0, &(0x7f0000000140)={'syztnl1\x00', 0x0}) [ 353.461449][T13462] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 353.485850][T13471] loop2: detected capacity change from 0 to 87 [ 353.497505][T13462] team0: Port device team_slave_0 added 17:42:16 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7b072f47707819ce25f6127a536c2356996ff278b40a75342060000003a9425c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 353.549501][T13468] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 353.559856][T13471] FAT-fs (loop2): invalid media value (0x00) [ 353.593511][ T26] audit: type=1804 audit(1628271736.488:134): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/217/file1/bus" dev="sda1" ino=14002 res=1 errno=0 [ 353.596511][T13471] FAT-fs (loop2): Can't find a valid FAT filesystem [ 353.706926][ T26] audit: type=1800 audit(1628271736.488:135): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14002 res=0 errno=0 [ 354.298973][T13468] team0: Port device team_slave_0 removed 17:42:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:17 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 17:42:17 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7b072f47707819ce25f6127a536c2356996ff278b40a75342060000003a9425c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 354.527266][T13512] loop2: detected capacity change from 0 to 87 [ 354.553892][T13512] FAT-fs (loop2): invalid media value (0x00) [ 354.570210][T13512] FAT-fs (loop2): Can't find a valid FAT filesystem [ 354.654945][ T26] audit: type=1804 audit(1628271737.548:136): pid=13512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/218/file1/bus" dev="sda1" ino=14068 res=1 errno=0 [ 354.737960][T13535] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 354.771135][T13535] team0: Port device team_slave_0 added [ 354.808473][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.833468][T13536] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 354.861315][ T26] audit: type=1800 audit(1628271737.548:137): pid=13512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14068 res=0 errno=0 [ 355.421611][T13536] team0: Port device team_slave_0 removed 17:42:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) sendto$inet6(r0, &(0x7f0000000200)="d8", 0x1, 0x24004855, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='\n', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) close(r0) 17:42:23 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) pipe(&(0x7f00000007c0)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x5411, 0x0) unshare(0x40040400) 17:42:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5452, 0xffffffffffffffff) 17:42:23 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7b072f47707819ce25f6127a536c2356996ff278b40a75342060000003a9425c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 361.035814][T13570] loop2: detected capacity change from 0 to 87 [ 361.125758][T13578] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 361.149359][T13570] FAT-fs (loop2): invalid media value (0x00) [ 361.187754][T13570] FAT-fs (loop2): Can't find a valid FAT filesystem [ 361.209312][ T26] audit: type=1804 audit(1628271744.108:138): pid=13580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/219/file1/bus" dev="sda1" ino=14839 res=1 errno=0 17:42:24 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 361.248352][T13578] team0: Port device team_slave_0 added 17:42:24 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 361.312857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.344419][T13581] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) sendto$inet6(r0, &(0x7f0000000200)="d8", 0x1, 0x24004855, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='\n', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) close(r0) [ 361.402178][ T26] audit: type=1800 audit(1628271744.138:139): pid=13580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14839 res=0 errno=0 17:42:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8918, 0x0) 17:42:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x338, 0x2e8, 0x2e8, 0x338, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x397) 17:42:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) flock(r0, 0xc) [ 362.034788][T13604] loop2: detected capacity change from 0 to 87 [ 362.097815][T13604] FAT-fs (loop2): invalid media value (0x00) [ 362.133272][T13604] FAT-fs (loop2): Can't find a valid FAT filesystem [ 362.140178][ T26] audit: type=1804 audit(1628271745.029:140): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/220/file1/bus" dev="sda1" ino=14532 res=1 errno=0 [ 362.221510][ T26] audit: type=1800 audit(1628271745.029:141): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14532 res=0 errno=0 [ 362.434306][T13581] team0: Port device team_slave_0 removed 17:42:30 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7b072f47707819ce25f6127a536c2356996ff278b40a75342060000003a9425c674"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:30 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x141242, 0x0) ftruncate(r0, 0x0) 17:42:30 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 17:42:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:30 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) 17:42:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 367.254876][T13683] loop2: detected capacity change from 0 to 87 [ 367.327539][T13683] FAT-fs (loop2): invalid media value (0x00) [ 367.330831][T13686] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 367.364947][T13683] FAT-fs (loop2): Can't find a valid FAT filesystem 17:42:30 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 367.393565][ T26] audit: type=1804 audit(1628271750.289:142): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/221/file1/bus" dev="sda1" ino=14858 res=1 errno=0 17:42:30 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) 17:42:30 executing program 4: open$dir(&(0x7f0000000040)='./file1\x00', 0x141642, 0x0) open$dir(&(0x7f0000001080)='./file1\x00', 0x101482, 0x1) [ 367.529928][T13686] team0: Port device team_slave_0 added 17:42:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xc3, &(0x7f0000000480)=ANY=[@ANYBLOB="080000bb00000000a4d51a155d520378d366ab1c184301e4ceb846ec7615ee8a8e15bbbfaf099b8fda8090b0c209d1837115ec4fb13d51f204c81336f0cedf2620afb5102e21ceaee948b8fb6b8492f96beb4f9068b40899d0bbfa33397f0800000076a2e384c50268678ea53f1829f866bc5240c0b5703c200549491d82de6764"]) [ 367.606091][T13692] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 367.654660][ T26] audit: type=1800 audit(1628271750.289:143): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14858 res=0 errno=0 17:42:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) syz_usb_connect$cdc_ncm(0x0, 0x73, 0x0, 0x0) 17:42:30 executing program 4: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000480)={0x7, 0xc2, &(0x7f0000000840)="b3ff3012404404e63b6b24e19448bd14a307c4a3c46273041972f69962365e4ab29f7d4d1938c140bd07b9f65e4b7ea3d86ab5cacc00104019052ea42c5b541abbb5ea10df18b923a547cc56392211a2d17691b59f33f58ad2a6e6317c37112c9869ea114b1d9ad4ad917917e26dead09222a4d70963c44740fb529eaafa0a37b69d3984d42440e6ee9959163321fb44c587f74eaf42cab3d7dfdae064049e90a6d2c0b8067e6d9aecf84525d9fc4e8dc423879a32f812ded4bf0489283cd9e02837"}) r1 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787f5e37ad0a53bc17e22071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c9b9dc80c17448490084aacf123ac2e10a7bdc1bf6bc2dc90fa3b9264f94fd5f8783b18b503334eb0795ae5b659299adfacafb7d2ce7358ece525f534b3e3b77362f9b09c9a2b27bbc8f29c7dbea77b10376cc0156917767890dcaa589bf35e41c6761e1f017e44eca6e1ffa0fb144671163686004a065fc4787d26dec0386b05"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, "f788244d893c7bd76d57863f255397404120ca3e05ca8536e0727c30904fc0bc"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x8, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0xb2, 0x15, 0x0, 0x0, "01407fde7f41c1b1b460ed85fe55d616a88c49077617e72190a14a423c376bd9"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3ae, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x3, 0x0, 0xffff, 0x0, "0d12078caf1497ac2884b26406a3337a9e7fe2c6bab8efc55c625a42024657d5"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000006a05cc00400001020301090245a06f555bc308"], &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x83, &(0x7f0000001100)=ANY=[@ANYBLOB="050f8300017e10005408000000feffc5405b5025ea60774f1e59d8fbc78d33bda4d6a57d8bffdc048c0f202b00005096430298ba61e6ee83a77c000000000041f499e24ecfb23680177f11a0e8b80d6fed588402abf1575592df520736792ab653a12b6999ed22df229421ceeb076e7f51a135760c82ad03f22186fa3cfed6aee55c5244011102170ce9c195056f2aa799b78b9eb94c2301c5ccc9aa5c4076963f32"]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 17:42:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 368.273741][T13717] loop2: detected capacity change from 0 to 87 [ 368.295510][T13692] team0: Port device team_slave_0 removed [ 368.303233][T13717] FAT-fs (loop2): bogus number of FAT sectors [ 368.315672][T13717] FAT-fs (loop2): Can't find a valid FAT filesystem 17:42:31 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 368.326839][ T8333] usb 2-1: new high-speed USB device number 3 using dummy_hcd 17:42:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 368.386159][ T26] audit: type=1804 audit(1628271751.279:144): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/222/file1/bus" dev="sda1" ino=14846 res=1 errno=0 [ 368.446740][ T9605] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 368.559943][ T26] audit: type=1800 audit(1628271751.329:145): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14846 res=0 errno=0 17:42:31 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) [ 368.656025][T13728] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 368.737734][ T9605] usb 5-1: too many configurations: 210, using maximum allowed: 8 [ 368.807699][T13728] team0: Port device team_slave_0 added 17:42:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787f5e37ad0a53bc17e22071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c9b9dc80c17448490084aacf123ac2e10a7bdc1bf6bc2dc90fa3b9264f94fd5f8783b18b503334eb0795ae5b659299adfacafb7d2ce7358ece525f534b3e3b77362f9b09c9a2b27bbc8f29c7dbea77b10376cc0156917767890dcaa589bf35e41c6761e1f017e44eca6e1ffa0fb144671163686004a065fc4787d26dec0386b05"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, "f788244d893c7bd76d57863f255397404120ca3e05ca8536e0727c30904fc0bc"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x101000) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000640)={0x6}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000340)=0x3) syz_usb_connect_ath9k(0x3, 0xffffffffffffffb1, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x67, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000400)={0x12, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7f, 0x0, 0x0, 0xffffffff, "d639bca156bbbe6945a8007ba51a0a65716ff27777033e607ebc239ca00d4a08"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201"], &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa}, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="050f4100013c100054019e31d68844abb337c225ea6077299f4f1e59d8fbc78d33bda4d6a57d8bffdc048c0ffbed2934379643ee97ba61308a61e22e00003ea13a"], 0x6, [{0x15, &(0x7f0000000500)=@string={0x15, 0x3, "2af69c67ad60fdb8ab774eb3b0d1a4122acf28"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x42, &(0x7f00000006c0)=ANY=[@ANYBLOB="420322d1e072bc202ff6ffc9aced63402b2e5db4d6a338664c27e158c698b4691924f0ca334fd58ef95c04205b5e227c773331f5226b5f800583394d2bd2eb0485"]}, {0x4, &(0x7f0000000740)=@lang_id={0x4}}, {0x4, &(0x7f0000000780)=@lang_id={0x4}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb5, 0xff}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f00000002c0)={0xa}, 0x19, &(0x7f0000000300)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a8c1d3d31d14464ea471617d2b173326"}]}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 368.912489][T13730] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 368.927997][ T8333] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 368.955054][ T8333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.982029][ T8333] usb 2-1: Product: syz [ 369.004169][ T8333] usb 2-1: Manufacturer: syz [ 369.022109][ T8333] usb 2-1: SerialNumber: syz [ 369.088283][ T8333] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 17:42:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 369.307899][T13744] loop2: detected capacity change from 0 to 87 [ 369.342888][T13744] FAT-fs (loop2): bogus number of FAT sectors [ 369.355677][T13744] FAT-fs (loop2): Can't find a valid FAT filesystem [ 369.357951][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 369.358080][T13730] team0: Port device team_slave_0 removed [ 369.415461][ T26] audit: type=1804 audit(1628271752.309:146): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/223/file1/bus" dev="sda1" ino=14858 res=1 errno=0 17:42:32 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 369.554036][ T26] audit: type=1800 audit(1628271752.349:147): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14858 res=0 errno=0 [ 369.576181][ T9605] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 369.594084][ T9605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.628579][ T9605] usb 5-1: Product: syz [ 369.644124][ T9605] usb 5-1: Manufacturer: syz [ 369.658579][ T20] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 369.660361][ T9605] usb 5-1: SerialNumber: syz [ 369.737569][ T8333] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 369.747549][ T9605] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 369.823789][T13757] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 370.045297][T13757] team0: Port device team_slave_0 added [ 370.079296][ T8325] usb 2-1: USB disconnect, device number 3 17:42:33 executing program 1: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) write$hidraw(r0, &(0x7f0000000000)="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", 0x800000) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) [ 370.113770][T13761] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:33 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7b072f47707819ce25f6127a536c2356996ff278b40a75342060000003a9425c67455"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 370.375127][ T26] audit: type=1800 audit(1628271753.269:148): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14845 res=0 errno=0 [ 370.462879][ T26] audit: type=1804 audit(1628271753.309:149): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723338353231343931322F73797A6B616C6C65722E78563133576D2F3231302F48C7C060 dev="sda1" ino=14845 res=1 errno=0 [ 370.479342][T13771] loop2: detected capacity change from 0 to 87 [ 370.493993][ T9605] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 370.572650][ T26] audit: type=1804 audit(1628271753.469:150): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/224/bus" dev="sda1" ino=14863 res=1 errno=0 [ 370.606938][ T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 370.626638][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.634725][ T20] usb 1-1: Product: syz [ 370.635516][ T26] audit: type=1800 audit(1628271753.509:151): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14863 res=0 errno=0 [ 370.702519][T13712] udc-core: couldn't find an available UDC or it's busy [ 370.730318][T13712] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 370.738216][ T20] usb 1-1: Manufacturer: syz [ 370.753875][ T20] usb 1-1: SerialNumber: syz [ 370.817213][ T8333] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 370.840003][ T8333] ath9k_htc: Failed to initialize the device [ 370.849539][ T20] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 370.882202][ T8325] usb 2-1: ath9k_htc: USB layer deinitialized [ 370.912550][T13761] team0: Port device team_slave_0 removed [ 371.012090][T13712] udc-core: couldn't find an available UDC or it's busy [ 371.070295][T13712] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 371.134740][T13712] udc-core: couldn't find an available UDC or it's busy [ 371.173059][T13712] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 371.231895][T13712] udc-core: couldn't find an available UDC or it's busy [ 371.267049][T13712] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 371.323848][T13712] udc-core: couldn't find an available UDC or it's busy [ 371.358758][T13712] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 371.556873][ T20] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 371.601693][ T8333] usb 5-1: USB disconnect, device number 6 [ 371.964402][T13737] udc-core: couldn't find an available UDC or it's busy [ 371.982035][T13737] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.033532][T13737] udc-core: couldn't find an available UDC or it's busy [ 372.046669][T13737] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.079460][T13737] udc-core: couldn't find an available UDC or it's busy [ 372.098659][T13737] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:42:35 executing program 4: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000480)={0x7, 0xc2, &(0x7f0000000840)="b3ff3012404404e63b6b24e19448bd14a307c4a3c46273041972f69962365e4ab29f7d4d1938c140bd07b9f65e4b7ea3d86ab5cacc00104019052ea42c5b541abbb5ea10df18b923a547cc56392211a2d17691b59f33f58ad2a6e6317c37112c9869ea114b1d9ad4ad917917e26dead09222a4d70963c44740fb529eaafa0a37b69d3984d42440e6ee9959163321fb44c587f74eaf42cab3d7dfdae064049e90a6d2c0b8067e6d9aecf84525d9fc4e8dc423879a32f812ded4bf0489283cd9e02837"}) r1 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, "f788244d893c7bd76d57863f255397404120ca3e05ca8536e0727c30904fc0bc"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x8, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0xb2, 0x15, 0x0, 0x0, "01407fde7f41c1b1b460ed85fe55d616a88c49077617e72190a14a423c376bd9"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3ae, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x3, 0x0, 0xffff, 0x0, "0d12078caf1497ac2884b26406a3337a9e7fe2c6bab8efc55c625a42024657d5"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000006a05cc00400001020301090245a06f555bc308"], &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x83, &(0x7f0000001100)=ANY=[@ANYBLOB="050f8300017e10005408000000feffc5405b5025ea60774f1e59d8fbc78d33bda4d6a57d8bffdc048c0f202b00005096430298ba61e6ee83a77c000000000041f499e24ecfb23680177f11a0e8b80d6fed588402abf1575592df520736792ab653a12b6999ed22df229421ceeb076e7f51a135760c82ad03f22186fa3cfed6aee55c5244011102170ce9c195056f2aa799b78b9eb94c2301c5ccc9aa5c4076963f32"]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 17:42:35 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:35 executing program 1: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @rumble={0x0, 0x4008}}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f00000004c0), 0x0) ioctl$HIDIOCGRAWNAME(r0, 0x5460, &(0x7f0000000080)) [ 372.295206][T13804] loop2: detected capacity change from 0 to 87 [ 372.344962][T13807] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 372.376237][ T8325] usb 1-1: USB disconnect, device number 3 [ 372.408700][ T9605] usb 5-1: Service connection timeout for: 258 [ 372.414888][ T9605] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 372.453112][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 372.453127][ T26] audit: type=1804 audit(1628271755.349:153): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/225/file1/bus" dev="loop2" ino=22 res=1 errno=0 [ 372.523310][T13807] team0: Port device team_slave_0 added [ 372.541156][T13804] attempt to access beyond end of device [ 372.541156][T13804] loop2: rw=0, want=90, limit=87 [ 372.553186][ T9605] ath9k_htc: Failed to initialize the device [ 372.571796][T13812] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 372.620336][ T8333] usb 5-1: ath9k_htc: USB layer deinitialized [ 372.626595][ T26] audit: type=1800 audit(1628271755.389:154): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=22 res=0 errno=0 [ 372.894312][T13824] udc-core: couldn't find an available UDC or it's busy [ 372.909761][T13824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:42:35 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) 17:42:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:35 executing program 1: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) write$hidraw(r0, &(0x7f0000000000)="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", 0x800000) syz_open_dev$hidraw(0xfffffffffffffffc, 0x3900, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) 17:42:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787f5e37ad0a53bc17e22071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c9b9dc80c17448490084aacf123ac2e10a7bdc1bf6bc2dc90fa3b9264f94fd5f8783b18b503334eb0795ae5b659299adfacafb7d2ce7358ece525f534b3e3b77362f9b09c9a2b27bbc8f29c7dbea77b10376cc0156917767890dcaa589bf35e41c6761e1f017e44eca6e1ffa0fb144671163686004a065fc4787d26dec0386b05"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, "f788244d893c7bd76d57863f255397404120ca3e05ca8536e0727c30904fc0bc"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x101000) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000640)={0x6}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000340)=0x3) syz_usb_connect_ath9k(0x3, 0xffffffffffffffb1, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x67, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000400)={0x12, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7f, 0x0, 0x0, 0xffffffff, "d639bca156bbbe6945a8007ba51a0a65716ff27777033e607ebc239ca00d4a08"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201"], &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa}, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="050f4100013c100054019e31d68844abb337c225ea6077299f4f1e59d8fbc78d33bda4d6a57d8bffdc048c0ffbed2934379643ee97ba61308a61e22e00003ea13a"], 0x6, [{0x15, &(0x7f0000000500)=@string={0x15, 0x3, "2af69c67ad60fdb8ab774eb3b0d1a4122acf28"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x42, &(0x7f00000006c0)=ANY=[@ANYBLOB="420322d1e072bc202ff6ffc9aced63402b2e5db4d6a338664c27e158c698b4691924f0ca334fd58ef95c04205b5e227c773331f5226b5f800583394d2bd2eb0485"]}, {0x4, &(0x7f0000000740)=@lang_id={0x4}}, {0x4, &(0x7f0000000780)=@lang_id={0x4}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb5, 0xff}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f00000002c0)={0xa}, 0x19, &(0x7f0000000300)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a8c1d3d31d14464ea471617d2b173326"}]}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 372.981752][T13812] team0: Port device team_slave_0 removed [ 373.057117][ T8333] usb 5-1: new high-speed USB device number 7 using dummy_hcd 17:42:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 373.111781][ T26] audit: type=1800 audit(1628271756.009:155): pid=13833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14870 res=0 errno=0 [ 373.153234][T13836] loop2: detected capacity change from 0 to 87 17:42:36 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) [ 373.206618][ T20] usb 1-1: Service connection timeout for: 257 [ 373.214544][ T20] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 17:42:36 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20941) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r2, &(0x7f0000000200)="06b4e49cb4", 0xffffff03) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r1, 0x0, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed005400000000003ec13e20000000000100"}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) [ 373.243828][ T26] audit: type=1804 audit(1628271756.049:156): pid=13833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723338353231343931322F73797A6B616C6C65722E78563133576D2F3231322F48C7C060 dev="sda1" ino=14870 res=1 errno=0 [ 373.247420][ T20] ath9k_htc: Failed to initialize the device [ 373.367411][ T8333] usb 5-1: too many configurations: 210, using maximum allowed: 8 [ 373.449545][T13847] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 373.469545][ T26] audit: type=1804 audit(1628271756.199:157): pid=13836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/226/file1/bus" dev="sda1" ino=14862 res=1 errno=0 [ 373.554970][ T8325] usb 1-1: ath9k_htc: USB layer deinitialized [ 373.639586][ T26] audit: type=1800 audit(1628271756.199:158): pid=13836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14862 res=0 errno=0 [ 373.721093][T13847] team0: Port device team_slave_0 added [ 373.762969][T13849] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 373.996480][ T8325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 374.207467][T13849] team0: Port device team_slave_0 removed [ 374.347254][ T8325] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 374.355838][ T8333] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 374.375868][ T8333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.419364][ T8333] usb 5-1: Product: syz [ 374.440671][ T8333] usb 5-1: Manufacturer: syz [ 374.460483][ T8333] usb 5-1: SerialNumber: syz [ 374.538585][ T8333] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.218039][ T8333] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.246591][ T8325] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.255667][ T8325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.290828][ T8325] usb 1-1: Product: syz [ 375.295026][ T8325] usb 1-1: Manufacturer: syz [ 375.328118][ T8325] usb 1-1: SerialNumber: syz 17:42:38 executing program 4: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000480)={0x7, 0xc2, &(0x7f0000000840)="b3ff3012404404e63b6b24e19448bd14a307c4a3c46273041972f69962365e4ab29f7d4d1938c140bd07b9f65e4b7ea3d86ab5cacc00104019052ea42c5b541abbb5ea10df18b923a547cc56392211a2d17691b59f33f58ad2a6e6317c37112c9869ea114b1d9ad4ad917917e26dead09222a4d70963c44740fb529eaafa0a37b69d3984d42440e6ee9959163321fb44c587f74eaf42cab3d7dfdae064049e90a6d2c0b8067e6d9aecf84525d9fc4e8dc423879a32f812ded4bf0489283cd9e02837"}) r1 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, "f788244d893c7bd76d57863f255397404120ca3e05ca8536e0727c30904fc0bc"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x8, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0xb2, 0x15, 0x0, 0x0, "01407fde7f41c1b1b460ed85fe55d616a88c49077617e72190a14a423c376bd9"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3ae, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x3, 0x0, 0xffff, 0x0, "0d12078caf1497ac2884b26406a3337a9e7fe2c6bab8efc55c625a42024657d5"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000006a05cc00400001020301090245a06f555bc308"], &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x83, &(0x7f0000001100)=ANY=[@ANYBLOB="050f8300017e10005408000000feffc5405b5025ea60774f1e59d8fbc78d33bda4d6a57d8bffdc048c0f202b00005096430298ba61e6ee83a77c000000000041f499e24ecfb23680177f11a0e8b80d6fed588402abf1575592df520736792ab653a12b6999ed22df229421ceeb076e7f51a135760c82ad03f22186fa3cfed6aee55c5244011102170ce9c195056f2aa799b78b9eb94c2301c5ccc9aa5c4076963f32"]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 17:42:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:38 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) 17:42:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 375.362302][ T7] usb 5-1: USB disconnect, device number 7 [ 375.437367][ T8325] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.504683][T13880] loop2: detected capacity change from 0 to 87 [ 375.558692][ T26] audit: type=1804 audit(1628271758.459:159): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/227/file1/bus" dev="loop2" ino=23 res=1 errno=0 [ 375.766152][ T26] audit: type=1800 audit(1628271758.489:160): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=23 res=0 errno=0 [ 375.919133][T13880] attempt to access beyond end of device [ 375.919133][T13880] loop2: rw=0, want=90, limit=87 17:42:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 376.154473][ T8510] usb 1-1: USB disconnect, device number 4 [ 376.176637][ T8325] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 376.191255][ T8510] usb 1-1: ath9k_htc: USB layer deinitialized [ 376.328723][ T8333] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 376.336173][ T8333] ath9k_htc: Failed to initialize the device [ 376.356207][ T7] usb 5-1: ath9k_htc: USB layer deinitialized 17:42:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, "f788244d893c7bd76d57863f255397404120ca3e05ca8536e0727c30904fc0bc"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x101000) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000640)={0x6}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000340)=0x3) syz_usb_connect_ath9k(0x3, 0xffffffffffffffb1, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x67, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000400)={0x12, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7f, 0x0, 0x0, 0xffffffff, "d639bca156bbbe6945a8007ba51a0a65716ff27777033e607ebc239ca00d4a08"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201"], &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa}, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="050f4100013c100054019e31d68844abb337c225ea6077299f4f1e59d8fbc78d33bda4d6a57d8bffdc048c0ffbed2934379643ee97ba61308a61e22e00003ea13a"], 0x6, [{0x15, &(0x7f0000000500)=@string={0x15, 0x3, "2af69c67ad60fdb8ab774eb3b0d1a4122acf28"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x42, &(0x7f00000006c0)=ANY=[@ANYBLOB="420322d1e072bc202ff6ffc9aced63402b2e5db4d6a338664c27e158c698b4691924f0ca334fd58ef95c04205b5e227c773331f5226b5f800583394d2bd2eb0485"]}, {0x4, &(0x7f0000000740)=@lang_id={0x4}}, {0x4, &(0x7f0000000780)=@lang_id={0x4}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb5, 0xff}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f00000002c0)={0xa}, 0x19, &(0x7f0000000300)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a8c1d3d31d14464ea471617d2b173326"}]}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 376.425705][T13887] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 376.451755][T13887] team0: Port device team_slave_0 added [ 376.496873][ T9616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.546411][ T26] audit: type=1800 audit(1628271759.439:161): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14883 res=0 errno=0 17:42:39 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x8440}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000007f7eff7a0af0fffcffffff79a402ff00000000b7060000ffffffff2d640000000000010000040001001f000404000002000000b7030000000000006a0a00fe0000000085000000fe000000b7000000000000009500002fa5000000c72305c8e34049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fa4ea80e5cf8dcf819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065f93072aae80000000000000400ae2bcd87cef90000005e69aa79f603c82caa501891595c44aa4b09d2f7b072f47707819ce25f6127a536c2356996ff278b40a75342060000003a9425c67455"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) 17:42:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 376.597402][T13910] loop2: detected capacity change from 0 to 87 [ 376.608635][ T26] audit: type=1800 audit(1628271759.439:162): pid=13860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14883 res=0 errno=0 17:42:39 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x103182) write$hidraw(r0, &(0x7f00000000c0)="f5", 0x1) [ 376.736486][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 376.978216][ T1068] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 377.037374][ T7] usb 5-1: too many configurations: 210, using maximum allowed: 8 17:42:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x16, 0x0, 0x101, "ed005400000000003ec13e200000000001000000000000000000000000001000"}) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c000201000000090400000102090000052406000105240000000d240f0100000000000000000006241a0000", @ANYRES64], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) [ 377.317417][ T1068] usb 1-1: too many configurations: 210, using maximum allowed: 8 17:42:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 377.684236][T13938] loop2: detected capacity change from 0 to 87 [ 377.736976][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 377.736991][ T26] audit: type=1804 audit(1628271760.639:165): pid=13938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/229/file1/bus" dev="sda1" ino=14879 res=1 errno=0 [ 377.867845][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.900939][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.941387][ T7] usb 5-1: Product: syz [ 377.948145][ T7] usb 5-1: Manufacturer: syz [ 377.963371][ T26] audit: type=1800 audit(1628271760.679:166): pid=13938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14879 res=0 errno=0 [ 377.967209][ T7] usb 5-1: SerialNumber: syz [ 378.050079][T13923] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 378.077746][ T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 378.111397][T13925] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 378.167613][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.173939][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.186602][ T9616] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 378.276418][ T1068] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 378.303686][ T1068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.358776][ T1068] usb 1-1: Product: syz [ 378.385265][ T1068] usb 1-1: Manufacturer: syz [ 378.395792][ T1068] usb 1-1: SerialNumber: syz [ 378.437214][ T9616] usb 2-1: Using ep0 maxpacket: 8 [ 378.467627][ T1068] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 378.561743][ T9616] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 378.599425][ T9616] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.634656][ T8333] usb 5-1: USB disconnect, device number 8 [ 378.636379][ T7] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 378.651989][ T9616] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.682743][ T8333] usb 5-1: ath9k_htc: USB layer deinitialized [ 378.847011][ T9616] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.860611][ T9616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.877961][ T9616] usb 2-1: Product: syz [ 378.887931][ T9616] usb 2-1: Manufacturer: syz [ 378.898346][ T9616] usb 2-1: SerialNumber: syz [ 378.947564][ T9616] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 379.039725][T13925] team0: Port device team_slave_0 removed [ 379.096392][ T1068] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 17:42:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:42 executing program 4: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000480)={0x7, 0xc2, &(0x7f0000000840)="b3ff3012404404e63b6b24e19448bd14a307c4a3c46273041972f69962365e4ab29f7d4d1938c140bd07b9f65e4b7ea3d86ab5cacc00104019052ea42c5b541abbb5ea10df18b923a547cc56392211a2d17691b59f33f58ad2a6e6317c37112c9869ea114b1d9ad4ad917917e26dead09222a4d70963c44740fb529eaafa0a37b69d3984d42440e6ee9959163321fb44c587f74eaf42cab3d7dfdae064049e90a6d2c0b8067e6d9aecf84525d9fc4e8dc423879a32f812ded4bf0489283cd9e02837"}) r1 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, "f788244d893c7bd76d57863f255397404120ca3e05ca8536e0727c30904fc0bc"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x8, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0xb2, 0x15, 0x0, 0x0, "01407fde7f41c1b1b460ed85fe55d616a88c49077617e72190a14a423c376bd9"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3ae, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x3, 0x0, 0xffff, 0x0, "0d12078caf1497ac2884b26406a3337a9e7fe2c6bab8efc55c625a42024657d5"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000400)=@conn_svc_rsp={0x0, 0x0, 0xa, "35281d74", {0x3, 0x0, 0x0, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000006a05cc00400001020301090245a06f555bc308"], &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x83, &(0x7f0000001100)=ANY=[@ANYBLOB="050f8300017e10005408000000feffc5405b5025ea60774f1e59d8fbc78d33bda4d6a57d8bffdc048c0f202b00005096430298ba61e6ee83a77c000000000041f499e24ecfb23680177f11a0e8b80d6fed588402abf1575592df520736792ab653a12b6999ed22df229421ceeb076e7f51a135760c82ad03f22186fa3cfed6aee55c5244011102170ce9c195056f2aa799b78b9eb94c2301c5ccc9aa5c4076963f32"]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 17:42:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:42 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x18040) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @rumble={0x0, 0xbfe}}) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r1, 0x40305839, &(0x7f0000000080)) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) write$hidraw(r0, &(0x7f0000000380)="577cf845938be7778e2d88815373d4", 0xf) write$hidraw(r2, &(0x7f0000000000)="c2", 0xa00000) [ 379.251149][T13966] loop2: detected capacity change from 0 to 87 [ 379.291349][ T26] audit: type=1804 audit(1628271762.189:167): pid=13966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/230/file1/bus" dev="sda1" ino=14900 res=1 errno=0 [ 379.354735][ T9609] usb 2-1: USB disconnect, device number 4 [ 379.407393][T13974] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 379.532066][ T26] audit: type=1800 audit(1628271762.189:168): pid=13966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14900 res=0 errno=0 [ 379.586270][ T9616] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 379.642157][T13974] team0: Port device team_slave_0 added [ 379.704769][T13915] udc-core: couldn't find an available UDC or it's busy [ 379.746566][T13915] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 379.758704][T13979] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 379.802105][ T26] audit: type=1800 audit(1628271762.559:169): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14901 res=0 errno=0 [ 379.847147][T13915] udc-core: couldn't find an available UDC or it's busy [ 379.909385][T13915] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 379.918185][ T9616] usb 5-1: too many configurations: 210, using maximum allowed: 8 [ 379.941325][ T26] audit: type=1800 audit(1628271762.559:170): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14901 res=0 errno=0 [ 379.998626][T13915] udc-core: couldn't find an available UDC or it's busy [ 380.047745][T13915] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 380.101739][ T26] audit: type=1800 audit(1628271762.559:171): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14901 res=0 errno=0 17:42:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20941) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="06b4", 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e346, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 17:42:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x16, 0x0, 0x101, "ed005400000000003ec13e200000000001000000000000000000000000001000"}) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c000201000000090400000102090000052406000105240000000d240f0100000000000000000006241a0000", @ANYRES64], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) [ 380.329653][T13979] team0: Port device team_slave_0 removed [ 380.353115][ T2968] usb 1-1: USB disconnect, device number 5 [ 380.586319][ T8333] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 380.593883][ T8325] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 380.737013][ T9616] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 380.754575][ T9616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.767200][ T9616] usb 5-1: Product: syz [ 380.783893][ T9616] usb 5-1: Manufacturer: syz [ 380.795913][ T9616] usb 5-1: SerialNumber: syz [ 380.836404][ T8325] usb 2-1: Using ep0 maxpacket: 8 17:42:43 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x219, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@loopback}}}]}, 0x38}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 17:42:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 380.867170][ T9616] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 380.887119][ T8333] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 380.987708][ T8325] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 381.004879][T14009] loop2: detected capacity change from 0 to 87 [ 381.012364][ T8325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 381.050290][ T8325] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.087342][ T26] audit: type=1804 audit(1628271763.989:172): pid=14009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/231/bus" dev="sda1" ino=14211 res=1 errno=0 [ 381.088974][T14015] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 381.207233][ T1068] usb 1-1: Service connection timeout for: 257 [ 381.213424][ T1068] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 381.253372][T14015] team0: Port device team_slave_0 added [ 381.290747][ T26] audit: type=1800 audit(1628271764.019:173): pid=14009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14211 res=0 errno=0 [ 381.320125][ T1068] ath9k_htc: Failed to initialize the device [ 381.356676][T14017] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 381.365376][ T2968] usb 1-1: ath9k_htc: USB layer deinitialized [ 381.397255][ T8325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.440099][ T8325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.486353][ T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 381.505888][ T8325] usb 2-1: Product: syz [ 381.535373][ T8325] usb 2-1: Manufacturer: syz [ 381.564531][ T8325] usb 2-1: SerialNumber: syz [ 381.668137][ T8325] cdc_wdm: probe of 2-1:1.0 failed with error -22 17:42:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 381.864462][T13968] udc-core: couldn't find an available UDC or it's busy [ 381.878488][ T8333] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 381.895183][T13968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.899494][ T8333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.951395][ T8333] usb 4-1: Product: syz [ 381.967977][ T8333] usb 4-1: Manufacturer: syz [ 381.988091][ T8333] usb 4-1: SerialNumber: syz [ 382.046767][T14017] team0: Port device team_slave_0 removed [ 382.057210][ T8333] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 382.079376][T14034] loop2: detected capacity change from 0 to 87 [ 382.171574][ T26] audit: type=1804 audit(1628271765.069:174): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/232/bus" dev="sda1" ino=14243 res=1 errno=0 [ 382.211388][T13968] udc-core: couldn't find an available UDC or it's busy 17:42:45 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x219, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@loopback}}}]}, 0x38}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 17:42:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 382.235543][ T9605] usb 2-1: USB disconnect, device number 5 [ 382.267304][T13968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 382.338976][T13968] udc-core: couldn't find an available UDC or it's busy [ 382.350702][T13968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 382.387796][T13968] udc-core: couldn't find an available UDC or it's busy [ 382.396789][T13968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 382.445939][T13968] udc-core: couldn't find an available UDC or it's busy [ 382.504254][T13968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 382.523310][T14048] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 382.675410][T14048] team0: Port device team_slave_0 added [ 382.710667][T14047] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 382.786601][ T8333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 382.879901][ T9605] usb 5-1: USB disconnect, device number 9 [ 383.213430][ T1068] usb 4-1: USB disconnect, device number 2 17:42:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') mmap$snddsp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d01, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:42:46 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0xe, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 17:42:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:46 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x219, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@loopback}}}]}, 0x38}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) [ 383.523435][T14062] loop2: detected capacity change from 0 to 87 [ 383.594640][T14047] team0: Port device team_slave_0 removed [ 383.600646][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 383.600661][ T26] audit: type=1804 audit(1628271766.499:176): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/233/bus" dev="sda1" ino=14418 res=1 errno=0 [ 383.686733][ T7] usb 5-1: Service connection timeout for: 258 [ 383.693367][ T7] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 383.751955][ T7] ath9k_htc: Failed to initialize the device [ 383.800918][ T9605] usb 5-1: ath9k_htc: USB layer deinitialized [ 383.847954][ T26] audit: type=1800 audit(1628271766.499:177): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14418 res=0 errno=0 [ 383.869713][ T8333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 383.878936][ T8333] ath9k_htc: Failed to initialize the device [ 383.905222][ T1068] usb 4-1: ath9k_htc: USB layer deinitialized [ 384.336458][ T1068] usb 4-1: new high-speed USB device number 3 using dummy_hcd 17:42:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20941) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="06b4", 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e346, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 17:42:47 executing program 1: syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2}}}}}}, 0x0) 17:42:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003bc0)={'ip6gre0\x00', &(0x7f0000003b40)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x7}}) 17:42:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:47 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x219, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@loopback}}}]}, 0x38}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 17:42:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a000f000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 384.584083][T14096] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 384.616613][T14098] loop2: detected capacity change from 0 to 87 17:42:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x7, 0x4) [ 384.778574][T14096] team0: Port device team_slave_0 added [ 384.803325][T14101] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a000f000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 385.041623][T14117] loop2: detected capacity change from 0 to 87 [ 385.124159][T14101] team0: Port device team_slave_0 removed [ 385.145786][T14108] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 17:42:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 385.176022][ T1068] usb 4-1: device descriptor read/64, error -71 [ 385.410615][T14108] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 385.443770][T14112] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 385.456482][ T1068] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 385.492773][T14112] bond0: (slave team_slave_0): Releasing backup interface [ 385.524123][T14131] loop2: detected capacity change from 0 to 87 [ 385.821407][T14118] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 385.832462][ T1068] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 385.891767][T14118] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 385.910372][T14121] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 385.937122][T14121] bond0: (slave team_slave_0): Releasing backup interface [ 386.165730][T14128] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 386.189843][T14128] team0: Port device team_slave_0 added [ 386.211656][T14130] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 386.537537][T14130] team0: Port device team_slave_0 removed [ 386.557566][T14108] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 386.574072][T14108] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 386.608617][T14141] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 386.647250][T14141] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 386.680710][T14142] bond0: (slave team_slave_0): Releasing backup interface [ 386.836902][ T1068] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 386.849712][ T1068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.872381][ T1068] usb 4-1: Product: syz [ 386.889408][ T1068] usb 4-1: Manufacturer: syz [ 386.917105][ T1068] usb 4-1: SerialNumber: syz [ 386.977516][ T1068] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 17:42:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20941) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="06b4", 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e346, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 17:42:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='L', 0x1}], 0x1}, 0x0) 17:42:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a000f000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a000f000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 387.627025][ T7631] usb 4-1: USB disconnect, device number 4 [ 387.641503][ T1068] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 387.727662][ T7631] usb 4-1: ath9k_htc: USB layer deinitialized [ 387.844945][T14167] loop2: detected capacity change from 0 to 87 [ 387.899115][T14158] bond0: (slave team_slave_0): Releasing backup interface 17:42:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x6e20, 0x0, @mcast2}, 0x44, 0x0}, 0x400c084) sendmmsg$inet6(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast1, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x30}}], 0x2, 0x0) [ 387.991874][ T26] audit: type=1804 audit(1628271770.890:178): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/237/file1/bus" dev="sda1" ino=14913 res=1 errno=0 17:42:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x20941) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="06b4", 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"}) r1 = syz_usb_connect_ath9k(0x3, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e346, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 388.195844][ T26] audit: type=1800 audit(1628271770.890:179): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14913 res=0 errno=0 17:42:51 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="e1535794e462126b2128b1dd4bad761555b8e6945663cb30082833020c6a02801d7b5d50ab39c6f995dd573d074952eb78041f68aaf5ed4702efe2b76e1ba682a9a5d942f96347414305e375419a5bb2b2159c223dff0b9206f4463f79dd104667dba5cc2871f0c122ad20a0301113539700c5746c2800fcee7d56476a7ee59f18a0d923e48d0507eb3ed0821f3e2796f674a3264966237d0bea8b5300aca990f87c6f6a4a9dfdfc709aee549fdd5248b2fb741c4223a59c3dc3a00e59ef811b172a53d39f50f26932308152c13cf7dc8a98e55d9d081cc4e74d01114e9039304557c46ee6d1b666820db3053e0c1a08b479731e7af4a146f891f1319c783980324819d7457a24d5f9a7e4d91b46948e494b24ed3c34128ba50b45d4b6a4c8caedd3626905c9d8eea8523e4aafabdea443a8bc2d4f40244bf29168708336a0bd6841ff966b19173dea941fb4cca70d8ed2a5d8c9ba7f0886856742a8ed4b16f2777b18da887e077ce4a1b01d45fb04ab05a0113d2eba18a5d570ba9c07451127e2285c633c274f5bc4159fa10707f97e0292470661126151cf388ecb3216c4e97abac9ca878e51c63ed17e056ad943bc8c087ff017222b6d3dff326bf6662c7bcf536eb532850ddb7d04d217ef903e24f40eef1e22841c8e83aae0bb8c490f4b24a7adbe5b3ad746c50e6eb421ea6d2c0671b6716637fa35def309bf2384e99b78269f3d21a97803900a3cef70289fbaa0a2418eb0d8ed401a64157e5d62d03e6013ffb627421c2199a47edab202efe20cc15ff5b4bedb920a6691655c7d9083ebc1a51f76320e0d6eb21beb04b800981a0f591e0eb49398dc066d01b52a38eee22a39bd2bcceb2aae37458e5563606cab5e106e3e54af10a418a4bd87477c212663f0bd77f4b3ad822caec2e65930892b019006592a6e514ba6cc0ebdae89a324dcd5416aa853a557b2aed0668ec977fe17dc07c9922058ba8411f8e27a1fab9731d5a76108e34e1b5d9f637d0abac37c94c7dade3281fc58d44c3c95d43057c4cd32d3ac278b07cd532cfff9b3df06bfc7cef7247eb7e23151626f60ca7b66a975dc010f63346acfcc48a89c76cc9c96ec42e160c746b6c6301995dff143b7e5f376e0dea34120719bb7d6ba553f5ad746709cbf4306036e9ab6cc6aeb32353ad13045c66b255d9fbe6bd072778645fc5fdf1f131879069e60e3b8643e3933e133e79f9933898c3fc1e0894749b98139071776f23e579036f40cfb321e2e4d3f0dc7163716425763e262536866ecc0c9e39040fd9c40a53eeb9d32f8861799cb2b97fb20706759e66a5a99b5ca3d5c48fda58fc1722ed90c9a5b9b1b7d8041f216f16586d00f05f96ba157f3e626254ba86f03627aadb9bfd6faa6a88e319cecd8f804012d8d4511f87553448f5332ea0bd493e50e795b405b1f5f16be9c5ac0889256857644f5b4af56cd48a487086f2866f3233ad1716902383e0fc8f29bef04a275666da2c3bb994808261e1538c5d4129864fb31c5ca51564320caa063028504cbd7968acb12dd4fd8b7d81838a6f143967dc0a00351a87d8f545c12fe6b9b9c01c98c1c0911da5053e004f8d9d522c297778673a4f155403eec1888199539bd3fb90e60f135b4cebffd22003b0f9e037cd413a84dbef448bfd0f8ead8826f0207720caaae585ad6a2eaf81e31a82549a5afb308445f546b10c4eeb81f8682bad15cac9cdd115128b1ff7ce92b9f038530b935e1b31d9e29299e70084d883c66e7f8152730e66d98e000d9185d9e7cde512e707fd9ecdd063202ce32770fc04c3e3b39b4d00dee2b86eedf359a719d8f5be8a6cfff79c6a73847674f1e3945d0c8fc0789edcf0965b549c98c6f30b7df80a7e869fb9707d6dddd5675da06f7a8bfc0f003fe18f7504ff700d05f2bd17c294a8e79bb1c744cb0a2333fc1ae83f252fab12b70d09951190621f8a9ebae7dfdc80f42e33a2b702f4524bbddcd4b03a03ab9a6e43fa82bfb932b72606005d57c83bf11ce8ceb8139ab2f573b0d40e4c9e7fa70470b2ac4ba37563ee737628f1620eb13480f3c123be0232b00658fc4e2d93940480640ddb35a7d6ff2269ef9ad10b43cd2d11d4d5acf2dca29396719bd47fb8c449580f1918f8b30d231197c648338bb661b839f90661772e3883578ffc196c966434776bcfd3f2a7b74b5500eb16a12c16a698a47036f2128b16302162cf7acc86b1b1d9b1f6e8d9bc7a9493242a9c148c3c9b00d447b66784728bbe1ae352e7af30d5b1a6c318960e5da8a8dce394b445a3857670e935a91e8be27029f8e832e6b72419454293baee91477168dcc23957208d860e1f8bce8ae8d23e36a6ad2fe7c8234974d5a5c81b2e0e4689c6b7e713695ec4cc5338f75e564d1ac130d8b23abdbc43911c367fe2c50d6618a87fdc2f088ba18164a54a983d46358a23df425235f8ff33fd9fd012327273c694cde319d467ec9cbe297042be4ddb2bb70a57287a0dc4a7cd069dac83ce3eed0ef494a38de40c18a7a63b2413320ef702de713c0f2268a8985491b08d2db28b2cada29baaf573aaab55eb1fe2f87acba4e472313921a89c4ed9ac02b3793bb4b0eabc9669444bc0c28bc15d82d91414769d9a7b65caab0e65cd804f52679ea512e0e1a58fa405de89fa898203219c6c7820a593386be4547432ecb2e771910a96e8efdf413ab89fca34875f4b9dc731e16b9f39ed7be212a6e67ed9f8e0ecbcbd4656a05526012edc33463795ba0a4589f6a976987e5e34c9592bb46628e1c3b8cc9a898f78b666c508416811ea2d113b6f8ce5b41a1c0390ff43f5700d12b68e5212f50948fd517fbb7cb4c26c761f60f311ddac94111f53e43f70a01616172cd3f325e09da8779d30c761aac06cae841375475fd997818c8619b14d04a41da8476f74fd32e06aeb586aeabcdb4b562f212e1699863b1b81aa8854ff7dc9860f721194060edeab68f16d42745f4dab7d852414a5826d4473dfaed2e5591147a02cff52a56ec11c8593f613a6e253a801b955261cfb73d9c131b1d4e7040cb30d94375c2bdcec2b4686ce02f308e46075537f91912afcbf8893f0f1f3dec1e1cdf5f7dbd4fe5029c90e7af155b6fbc00f94f5978606dcc4376231a3e03e86edea4e4c5d0c1eef476a6267a796d652eabbebb341ada8cdf90a8ff6e2af835309d364c6ad634a183b9f6f7a2cd7be33c953be39db1852bdd2f747d6aab318f64cd748168b3c615074585b4285cdcae746efdf1ea0d2242eb4be1d238c7f10e9152e60327dc2f15afc26c72e46f7829ed7ecfaa9a57dfc66ee0acb6a9d5d2091d014024b027e8612e944f1ed36a2daa98090569a8ba1daa6abb2069de110a33c5ca00238b1f8b19b04eabef3c214f440242621690e750e07696117448331696d8045b445001b90a61f2fbc4194cd51cfb1978fc5708dd4693af4f289717c2ebd954b31f9e8d5ecfbbf4b49e173db07e3488f68615d967ffcc5e7594dcd68f45c1eb0f14a853b8be566ceb0f444d57cab0f0e8fd174c8f073537a57255f2937d0e9d39bcb048c6648883d81ef328076b5446562aeb419455cbf121e39630db46af11fba5e9f0119719a064d7f6c54bd5e704380cebef99a9619cd840fa8beaf8e90138a58ae29989ae3cd0f7535769c221474ab45f687eef4fbfb6accae440a391d29ffefb2fe7b4dd69977703d09c33ff2d335efe7969f9566dd74629d4cb8e1c664837c8b294a5243ec796838a17d51c0602549888b8033279b046040d6b901e87b95a666315578f2b1dbf1f16e8cbf9ca173caee8656ac27c9a811311296e7df23a923db7f5c8fd22c5244fdd0c9da2b1a7f46af6b33216f8eea1cd6dcfc5f93658ebb16bc678c7259ed6ce4bfcc9c5dc806175770bf55a6987085db48e23fa89345ec0d41a51bc9ea485a18580d98564d433d5c2f7925c11c3e83d3014258833a6d3e73a2697f25bd8d1f9f2a09846a960551e495ededa8fc47f16faaebab48ce8fdddacde8d2008c353ba68f018a4a8bc6dc0656f7919573c3e224c8c995f5893b58b930a01a946b6597a45c87d39ccb63db0805bc4e452e70123345f010174af9b11c48f703fdb2100a306833ffd1a573345eaf480f00510005d7499a828030a2a31c79e68c59fec94b67c37580eed3153b1452983373be2c694f21f06cc3aeec763964993ff129b6eeb40bbc277825ce34c5b6260831d8ba3355a11d167a3d43213f5106481c1e82bc21cb1d2075c4de8d3024c3c0fd89ae70ae4e1d4ce2020d0632e826ce8562ea05533d1893c73868c669d1aad000cc63b9d64715a2e398373c13491b28610b0db26eeaf48ae7ebabbad4e39f2f567f0b5a78837618355bd09a9d608b44ac69e08cd6ec45eab9c89ff496cb313c5c57b18464de6ffb5dd656cb587c9f7fdf2752f6729b7e0e0b5827ef620e9d6f3ca2a4d8a558b778e35729f2dc2177464492addc66f0a470539819a8aab6ef00d171c1b8c8dff6c4135bfe216de73a3bcc0fd6357c737bbf073b76a93afb6ee277c4bb678f720c82aaeec2c8398fa07edceb2e69731251f330098ec40cd8fa000d758c443b6cfd828bfba2495e100869e4bb40f2e4d302dd86af76cbbccf843de3208ed392dadd059c1b6b34be959db682c98bafdf2afdb9fe65ccfb8c89944e883d742b17fa14e7c7705c3435c6517cfc6301619a901130bd52dee6a7566a8ab75b27e48f6b3a97f066a6b2773c70118943ebe00a452fc3d04b73380b4cc621ed2cffcbc5b91bfe7e0fb4ad364bd6fb1694b1d9ec7276c638a113b2fad192609c0dbb3607b4f401486896ab81db7db32cb9b233f2aeed221ef8a90e98ba0f20328c840d77429bed3ed375e4669398ef9d16ad6847da5a315fda2804785588dfaf8ff1fb0e4619614842843fd9db05f35ded5c6fc40745995e1eb9cadde5dde5ad4d0d61bf6322694e39caab1cf3ecf7c22d7fccac6f6ccf280f3000e8a61f18bae4b1284c8f65830e29429345a34bde2cac6be697085bcbe8b1468f8756d91164bf32cac1df87c158dadc065025c995684f1c2836d4218d1d85a511ea5bce9355b6966712a7b69b6e00741e37bdae86993a1749bfac8bb05cdee3e6d73b0d7dab27b48a2e278211d5ed41a620221b4b94c72252f8de5cd326d6c62e7ee11be7b78a5e8810f2155a5e7fed26fc05fa037ba9b02a110c4fdbfce4236b8f20fac42228143ac768b7228def83367f140ebb8a23195af9cd2d45b5dec80cbfa7cfe5474eab1246b7c5b807a695807107c55807028664867c5424c96021e63e774a32a5f2b5f1b87b8028e0880195ec452c12784b2964525", 0xec1) [ 388.523583][T14186] loop2: detected capacity change from 0 to 87 17:42:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@mcast1}, 0x14) [ 388.660659][ T26] audit: type=1804 audit(1628271771.560:180): pid=14186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/238/file1/bus" dev="sda1" ino=14917 res=1 errno=0 [ 388.705958][ T8333] usb 4-1: new high-speed USB device number 5 using dummy_hcd 17:42:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 388.762812][ T26] audit: type=1800 audit(1628271771.590:181): pid=14186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14917 res=0 errno=0 [ 388.945856][T14196] loop2: detected capacity change from 0 to 87 [ 388.963263][T14166] bond0: (slave team_slave_0): Enslaving as an active interface with an up link 17:42:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 388.992919][T14170] bond0: (slave team_slave_0): Releasing backup interface [ 389.015657][ T26] audit: type=1804 audit(1628271771.910:182): pid=14196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/239/file1/bus" dev="loop2" ino=24 res=1 errno=0 17:42:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 389.041754][ T8333] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 389.083463][ T26] audit: type=1800 audit(1628271771.950:183): pid=14196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=24 res=0 errno=0 17:42:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newneigh={0x30, 0x1c, 0xfef466bff8d8437d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private1}]}, 0x30}}, 0x0) [ 389.255166][T14207] loop2: detected capacity change from 0 to 87 [ 389.327529][ T26] audit: type=1804 audit(1628271772.230:184): pid=14207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/240/file1/bus" dev="loop2" ino=25 res=1 errno=0 [ 389.420317][ T26] audit: type=1800 audit(1628271772.260:185): pid=14207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=25 res=0 errno=0 17:42:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:52 executing program 1: timer_create(0x4, &(0x7f0000000e40), 0x0) 17:42:52 executing program 0: socketpair(0x2, 0x0, 0x6cb, 0x0) 17:42:52 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x80}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) [ 389.679709][T14219] loop2: detected capacity change from 0 to 87 [ 389.766071][ T26] audit: type=1804 audit(1628271772.660:186): pid=14219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/241/file1/bus" dev="loop2" ino=26 res=1 errno=0 [ 389.802563][T14226] validate_nla: 6 callbacks suppressed [ 389.802598][T14226] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 389.889859][ T26] audit: type=1800 audit(1628271772.660:187): pid=14219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 389.979277][ T8333] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 389.988505][ T8333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.998157][ T8333] usb 4-1: Product: syz [ 390.002344][ T8333] usb 4-1: Manufacturer: syz [ 390.008444][ T8333] usb 4-1: SerialNumber: syz [ 390.057365][ T8333] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 390.766033][ T1068] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 391.248060][ T8333] usb 4-1: USB disconnect, device number 5 17:42:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000036c0)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x3a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x28120001) 17:42:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 17:42:54 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0) 17:42:54 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x2a470636a8fa6ae9) 17:42:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 391.846090][ T1068] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 391.853298][ T1068] ath9k_htc: Failed to initialize the device [ 391.902494][ T8333] usb 4-1: ath9k_htc: USB layer deinitialized [ 391.966114][T14262] loop2: detected capacity change from 0 to 87 17:42:54 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/udp\x00') [ 392.048596][T14265] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x0) [ 392.089448][ T26] audit: type=1804 audit(1628271774.990:188): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/242/file1/bus" dev="sda1" ino=14927 res=1 errno=0 17:42:55 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 17:42:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 392.236980][ T26] audit: type=1800 audit(1628271775.020:189): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14927 res=0 errno=0 17:42:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:55 executing program 1: syz_open_procfs(0x0, &(0x7f0000000940)='net/rt_cache\x00') 17:42:55 executing program 3: syz_open_procfs(0x0, &(0x7f0000000200)='timers\x00') 17:42:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') 17:42:55 executing program 0: socketpair(0xa, 0x0, 0x1802, 0x0) [ 392.553179][T14283] loop2: detected capacity change from 0 to 87 [ 392.607898][T14287] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:55 executing program 1: pipe2$9p(&(0x7f0000000040), 0x0) 17:42:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:55 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', 0x0}) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 17:42:55 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x19, 0x4, 0x4, 0x400}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20) 17:42:55 executing program 1: bpf$OBJ_PIN_PROG(0x6, &(0x7f00000016c0)={&(0x7f0000000440)='./file0\x00'}, 0x10) 17:42:55 executing program 3: r0 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 17:42:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000049c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="89"], 0x24}}, 0x0) 17:42:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 393.135160][T14311] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 393.170173][T14312] loop2: detected capacity change from 0 to 87 17:42:56 executing program 4: pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x4}, &(0x7f0000000100)={0x1f}, &(0x7f0000000140), &(0x7f0000000200)={&(0x7f00000001c0)={[0x7fffffff]}, 0x8}) 17:42:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:56 executing program 1: socket$inet(0x2, 0x3, 0x4) 17:42:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:56 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000e00), 0x0) 17:42:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000040)=""/110, 0x6e}], 0x1, 0x9, 0x0) 17:42:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') [ 393.622638][T14331] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000006440)='net/stat\x00') ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 393.785547][T14337] loop2: detected capacity change from 0 to 87 17:42:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={0x0}}, 0x0) [ 393.901619][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 393.901637][ T26] audit: type=1804 audit(1628271776.800:194): pid=14337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/245/file1/bus" dev="sda1" ino=14904 res=1 errno=0 17:42:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') 17:42:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 17:42:57 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x6, 0x0, 0x0) [ 394.154422][T14352] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 394.177978][ T26] audit: type=1800 audit(1628271776.800:195): pid=14337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14904 res=0 errno=0 17:42:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='io\x00') read$FUSE(r0, 0x0, 0x0) 17:42:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 17:42:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 394.432938][T14363] loop2: detected capacity change from 0 to 87 17:42:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x8000451b, 0x0) 17:42:57 executing program 4: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)={&(0x7f00000001c0)={[0x7fffffff]}, 0x8}) [ 394.548236][ T26] audit: type=1804 audit(1628271777.450:196): pid=14363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/246/file1/bus" dev="sda1" ino=14909 res=1 errno=0 17:42:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @loopback}}]}, 0x110) 17:42:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) 17:42:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 394.688004][ T26] audit: type=1800 audit(1628271777.480:197): pid=14363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14909 res=0 errno=0 [ 394.761060][T14376] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:57 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r0, 0x0, 0xfffffffffffffe22) 17:42:57 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 17:42:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) [ 395.000028][T14388] loop2: detected capacity change from 0 to 87 17:42:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') read$FUSE(r0, 0x0, 0x0) [ 395.089122][ T26] audit: type=1804 audit(1628271777.990:198): pid=14388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/247/file1/bus" dev="sda1" ino=14657 res=1 errno=0 17:42:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:58 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000480)={[0x4]}, 0x8) [ 395.227366][ T26] audit: type=1800 audit(1628271778.020:199): pid=14388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14657 res=0 errno=0 17:42:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 17:42:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000002100)='environ\x00') read$FUSE(r0, 0x0, 0x0) 17:42:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) [ 395.451855][T14411] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:58 executing program 3: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={[0x4]}, 0x8) [ 395.556883][T14414] loop2: detected capacity change from 0 to 87 17:42:58 executing program 0: rt_sigsuspend(&(0x7f0000000040)={[0x4]}, 0x8) 17:42:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 395.642401][ T26] audit: type=1804 audit(1628271778.540:200): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/248/file1/bus" dev="sda1" ino=13890 res=1 errno=0 17:42:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)) 17:42:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="106e33"], 0x4c}}, 0x0) 17:42:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 395.780565][ T26] audit: type=1800 audit(1628271778.580:201): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13890 res=0 errno=0 17:42:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth0_to_hsr\x00'}, 0x18) [ 395.966368][T14433] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 17:42:58 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0) [ 396.079008][T14436] loop2: detected capacity change from 0 to 87 [ 396.112554][T14439] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 17:42:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:59 executing program 3: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101540) 17:42:59 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 17:42:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 396.436543][T14455] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 396.582959][T14458] loop2: detected capacity change from 0 to 87 17:42:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000260007031dfffd946f610500070000040000000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) 17:42:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/arp\x00') read$FUSE(r0, &(0x7f0000002c40)={0x2020}, 0x2020) 17:42:59 executing program 3: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) 17:42:59 executing program 4: select(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x400}, &(0x7f0000000280)={0x77359400}) 17:42:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:42:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 396.879811][T14476] loop2: detected capacity change from 0 to 87 17:42:59 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000000)={0x3}, 0x0) [ 396.928391][T14478] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:42:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 396.972478][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:42:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:42:59 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x801) 17:43:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$FUSE(r0, 0x0, 0x0) 17:43:00 executing program 3: socket(0x0, 0x80c, 0x0) 17:43:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/230, 0xe6}], 0x1) 17:43:00 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000000a40)=[{{0xfffffffffffffffd, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000076c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) 17:43:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) 17:43:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) readv(r0, &(0x7f0000002740)=[{&(0x7f0000001480)=""/4075, 0xfeb}], 0x1) [ 397.667443][T14505] loop2: detected capacity change from 0 to 87 17:43:00 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') [ 397.808945][ T26] audit: type=1804 audit(1628271780.710:202): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/252/file1/bus" dev="loop2" ino=29 res=1 errno=0 [ 397.829462][T14516] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)) 17:43:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 398.103187][T14505] attempt to access beyond end of device [ 398.103187][T14505] loop2: rw=2049, want=92, limit=87 [ 398.131459][T14505] Buffer I/O error on dev loop2, logical block 45, lost async page write [ 398.153321][T14505] attempt to access beyond end of device [ 398.153321][T14505] loop2: rw=2049, want=94, limit=87 [ 398.204465][T14505] Buffer I/O error on dev loop2, logical block 46, lost async page write 17:43:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:01 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1) 17:43:01 executing program 1: timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000dc0)) [ 398.351051][T14527] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:01 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000ec0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa00af3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660582d43eb36c6f40a7a19f342f0b00812e13eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000020000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a00000000ff435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0adb02d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b14723604ba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969ced595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30fa94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e517a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95feef2acd1fe582786105c7dfa2e5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca378e676c3e08c1ed43ca8d3d10994c0b58645ac518a75fde7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d34b5457acf37331766e472391e35801b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464b635197351a5ef0a0fb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40c5b8bcb6080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f83100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa370ac891e10096e7e60fc3541a2c905a1a95e9571bf38ae81bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5944912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba82b0d5ccf491e2681aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc13c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710030000002fc5ed1762eb0b428ee751c47d8e89fc745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be2959f6bcd75f0dda9de5532e71ae9e48b0ed1254a83186c1526af6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af930cd6db49a47613808bad959719c0000000000378a921c7f7f8433c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40be61a543a5a194f9ac18d76b5440e3b1a569ed7aa287378c697f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e303930002000000000000f9360984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5002512bcbf9b24accfecb0f477db103463af2847e6ade5b9e065ec0d0ba58fedae501040000a475b169469f9efd131925d98c34b3cb26fe26796dd43b87e1cdee39f5cf21d2e80a64ac97e71cafc29bfb78db090dd12225efeda2e93bf7f6ba7865e9c375a780929dfa5a210bf5858e2a4ff8e8d1e8c9cceed07c6312b734c72510d335acc94f76e7078ce4066f1e0ac9429f8013683301277a11e25b248b180cb6207a0e26757f3f1bfc6c27f3720d1fb74afb17f3b5239bc2243853d5234afb05ed6024ed4dee34666c5b5522b54cb433efa54b4e9022533e7c89bdee957d82bf91dd99892af2681e4c72f32fa3334313e334cc140daec7dcb22f463457a1a5ac230bbded86258206046f556589f5627ab2751eb34d940519f009412098398ad822a8509d2d32da656ac5935e4c7f9503ce4daf13300dfd611528049310544d3e8613926fbe2647e258932592c9123f1c74023144442d09ef90c64950176c666da6b658108ac54beb2379aa70501c423d9c4e4f426ab5ff2a33767b408ed19e399c33b52abc4ac24da0d4cf07d93029583591c33f0f80513c541581977f2e9735e1edb66fdb2722eb4b0b670ba74fdee2f1a3cf85777af5d8267acaa9d83c23a4b40d0f53dce003c03c5959e405fc4f2c05d3394f014a39caabbeff7c7cadbdc57def7f5f758aa46b6e2fddc779770d7e395c4ac2a136a30e7c0a301dffc5565d7244fb29cd302c36"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f0000004e00)=[{{&(0x7f0000001fc0)=@in6, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002040)=""/7, 0x7}, {&(0x7f0000002080)}, {&(0x7f00000020c0)=""/242, 0xf2}, {&(0x7f00000021c0)=""/253, 0xfd}, {&(0x7f00000022c0)=""/205, 0xcd}], 0x5, &(0x7f0000002440)=""/96, 0x60}, 0x1}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000024c0)=""/195, 0xc3}, {&(0x7f00000025c0)=""/108, 0x6c}, {&(0x7f0000002640)=""/199, 0xc7}], 0x3, &(0x7f0000002780)=""/63, 0x3f}, 0x74cc149c}, {{&(0x7f00000027c0)=@nfc, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002840)=""/168, 0xa8}, {&(0x7f0000002900)=""/255, 0xff}, {&(0x7f0000002a00)=""/87, 0x57}], 0x3, &(0x7f0000002ac0)=""/4096, 0x1000}, 0xfffffffb}, {{&(0x7f0000003ac0)=@rc={0x1f, @none}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/32, 0x20}, {&(0x7f0000003b80)=""/28, 0x1c}, {&(0x7f0000003bc0)=""/12, 0xc}, {&(0x7f0000003c00)=""/47, 0x2f}], 0x4, &(0x7f0000003c80)=""/239, 0xef}, 0x8000}, {{&(0x7f0000003d80)=@ipx, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/79, 0x4f}, {&(0x7f0000003e80)=""/228, 0xe4}], 0x2, &(0x7f0000003fc0)=""/203, 0xcb}, 0x401}, {{&(0x7f00000040c0)=@caif=@dbg, 0x80, &(0x7f0000004300)=[{&(0x7f0000004140)=""/176, 0xb0}, {&(0x7f0000004200)=""/218, 0xda}], 0x2, &(0x7f0000004340)=""/154, 0x9a}, 0xa4b}, {{&(0x7f0000004400)=@can, 0x80, &(0x7f0000004600)=[{&(0x7f0000004480)=""/54, 0x36}, {&(0x7f00000044c0)=""/58, 0x3a}, {&(0x7f0000004500)=""/37, 0x25}, {&(0x7f0000004540)=""/183, 0xb7}], 0x4}, 0x8}, {{&(0x7f0000004640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004b00)=[{&(0x7f00000046c0)=""/106, 0x6a}, {&(0x7f0000004740)=""/208, 0xd0}, {&(0x7f0000004840)=""/191, 0xbf}, {&(0x7f0000004900)=""/13, 0xd}, {&(0x7f0000004940)=""/56, 0x38}, {&(0x7f0000004980)=""/233, 0xe9}, {&(0x7f0000004a80)=""/14, 0xe}, {&(0x7f0000004ac0)=""/24, 0x18}], 0x8, &(0x7f0000004b80)=""/154, 0x9a}, 0x9}, {{&(0x7f0000004c40)=@nl, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004cc0)=""/160, 0xa0}], 0x1, &(0x7f0000004dc0)=""/23, 0x17}, 0x8}], 0x9, 0x40, &(0x7f0000005040)) [ 398.469523][T14534] loop2: detected capacity change from 0 to 87 [ 398.538781][ T26] audit: type=1804 audit(1628271781.440:203): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/253/file1/bus" dev="loop2" ino=30 res=1 errno=0 17:43:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x64}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/153, 0x99}], 0x1) 17:43:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b0170600000093ca"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000015"], 0x50}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 17:43:01 executing program 3: socketpair(0x22, 0x2, 0x3, &(0x7f0000000080)) [ 398.652815][T14534] attempt to access beyond end of device [ 398.652815][T14534] loop2: rw=2049, want=92, limit=87 [ 398.690587][T14534] Buffer I/O error on dev loop2, logical block 45, lost async page write [ 398.728647][T14534] attempt to access beyond end of device [ 398.728647][T14534] loop2: rw=2049, want=94, limit=87 [ 398.765172][T14534] Buffer I/O error on dev loop2, logical block 46, lost async page write 17:43:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:01 executing program 0: r0 = socket(0x25, 0x1, 0x0) recvmsg$unix(r0, &(0x7f000000a500)={0x0, 0x0, 0x0}, 0x2001) [ 398.911780][ T26] audit: type=1804 audit(1628271781.810:204): pid=14547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir385214912/syzkaller.xV13Wm/244/cgroup.controllers" dev="sda1" ino=14967 res=1 errno=0 [ 398.949956][T14550] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:01 executing program 3: r0 = socket(0x25, 0x1, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) [ 399.255955][T14560] loop2: detected capacity change from 0 to 87 17:43:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 399.331023][ T26] audit: type=1804 audit(1628271782.230:205): pid=14560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/254/file1/bus" dev="loop2" ino=31 res=1 errno=0 17:43:02 executing program 3: r0 = socket(0x25, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x120) 17:43:02 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 17:43:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) [ 399.422865][T14567] attempt to access beyond end of device [ 399.422865][T14567] loop2: rw=2049, want=92, limit=87 [ 399.451291][T14567] Buffer I/O error on dev loop2, logical block 45, lost async page write 17:43:02 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket(0x10, 0x80002, 0x0) close(r2) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000e80)=0x8001, 0x4) [ 399.479672][T14567] attempt to access beyond end of device [ 399.479672][T14567] loop2: rw=2049, want=94, limit=87 [ 399.510612][T14567] Buffer I/O error on dev loop2, logical block 46, lost async page write [ 399.668731][T14574] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040), 0x0, 0x0) 17:43:02 executing program 0: r0 = socket(0x25, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 17:43:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0x18, 0x1, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 17:43:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none}, 0xe) 17:43:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 399.938020][T14583] loop2: detected capacity change from 0 to 87 [ 400.092215][ T26] audit: type=1804 audit(1628271782.990:206): pid=14583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/255/file1/bus" dev="sda1" ino=14980 res=1 errno=0 17:43:03 executing program 0: r0 = socket(0x2b, 0x1, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 17:43:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) readv(r0, &(0x7f0000002740), 0x300) 17:43:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000004f00)=[{{&(0x7f0000000140)=@abs, 0x6e, 0x0}}], 0x1, 0x0) [ 400.255864][T14599] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:03 executing program 1: r0 = socket(0x25, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 400.311841][ T26] audit: type=1800 audit(1628271782.990:207): pid=14583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14980 res=0 errno=0 17:43:03 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d080620"], 0x100}}, 0x0) 17:43:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @timestamp, @window, @sack_perm, @sack_perm, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 17:43:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)={0x1, 0x0, 0x0, 0x0, 0x881}, 0x40) 17:43:03 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x3a) 17:43:03 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) [ 400.864643][T14613] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 17:43:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{}, {}, {}, {}, {}, {0xaa00}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x1}}, {}, {0x0, 0x0, {0x3}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0x200}}, {}, {}, {}, {0x0, 0x6}]}}}]}, 0x268}}, 0x0) [ 401.072893][T14626] loop2: detected capacity change from 0 to 87 [ 401.140491][ T26] audit: type=1804 audit(1628271784.040:208): pid=14626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/256/file1/bus" dev="loop2" ino=32 res=1 errno=0 [ 401.189885][T14626] attempt to access beyond end of device [ 401.189885][T14626] loop2: rw=0, want=90, limit=87 [ 401.234761][ T26] audit: type=1800 audit(1628271784.040:209): pid=14626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=32 res=0 errno=0 [ 401.260114][T14633] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:04 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80000001) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = accept(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x28, 0x21, 0x8, 0x70bd25, 0x25dfdbfd, {0x2, 0x80, 0x80, 0x9, 0x80, 0x0, 0x0, 0x7, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x80) 17:43:04 executing program 3: r0 = socket(0x25, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x7) 17:43:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, @none, 0x7}, 0xe) 17:43:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:04 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60}, 0x60) 17:43:04 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0xe, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) [ 401.525226][T14648] loop2: detected capacity change from 0 to 87 [ 401.591053][ T26] audit: type=1804 audit(1628271784.490:210): pid=14648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/257/file1/bus" dev="loop2" ino=33 res=1 errno=0 [ 401.655679][T14648] attempt to access beyond end of device [ 401.655679][T14648] loop2: rw=0, want=90, limit=87 17:43:04 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001a00)={'ip6_vti0\x00', &(0x7f0000001980)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) [ 401.714337][T14655] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 401.765061][ T26] audit: type=1800 audit(1628271784.490:211): pid=14648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 17:43:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0x2c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}]}, 0x2c}}, 0x0) 17:43:04 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 17:43:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 17:43:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) readv(r0, &(0x7f0000002740), 0x1) 17:43:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000050101"], 0x18}}, 0x0) [ 402.184060][T14674] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef4260000", 0x17}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4, 0x19}]}, 0x18}}, 0x0) [ 402.319250][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:43:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x100}}, 0x0) 17:43:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x20, 0x1}, 0xe) 17:43:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d"], 0x100}}, 0x0) 17:43:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 402.593410][T14693] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 402.700864][T14697] loop2: detected capacity change from 0 to 87 17:43:05 executing program 1: sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:05 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x87}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x0) 17:43:05 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @dev}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) 17:43:05 executing program 4: futex(&(0x7f0000000100), 0x3, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x0) [ 402.858351][ T26] audit: type=1804 audit(1628271785.760:212): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/258/bus" dev="sda1" ino=14985 res=1 errno=0 17:43:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef4260000", 0x17}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 402.953019][ T26] audit: type=1800 audit(1628271785.760:213): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14985 res=0 errno=0 17:43:06 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) 17:43:06 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) dup2(r0, r1) 17:43:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 403.250049][T14721] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:06 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 17:43:06 executing program 1: sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef4260000", 0x17}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc803, &(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @dev}, 0x1c) close(r0) 17:43:06 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) [ 403.561292][T14735] loop2: detected capacity change from 0 to 87 17:43:06 executing program 1: sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) [ 403.724910][T14735] attempt to access beyond end of device [ 403.724910][T14735] loop2: rw=0, want=90, limit=87 [ 403.820218][T14748] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) semget$private(0x0, 0x4, 0x0) 17:43:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/162, 0xa2}, {&(0x7f0000000100)=""/239, 0xef}], 0x2) 17:43:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 17:43:06 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) [ 404.008674][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 404.008692][ T26] audit: type=1326 audit(1628271786.920:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14751 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0xffff0000 17:43:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 404.179085][T14762] loop2: detected capacity change from 0 to 87 [ 404.189705][ T26] audit: type=1326 audit(1628271787.090:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14757 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0xffff0000 [ 404.313993][ T26] audit: type=1804 audit(1628271787.190:219): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/260/file1/bus" dev="loop2" ino=35 res=1 errno=0 [ 404.322511][T14762] attempt to access beyond end of device [ 404.322511][T14762] loop2: rw=0, want=90, limit=87 [ 404.410126][T14769] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:43:07 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="03366dadf711", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f5a027", 0x20, 0x11, 0x0, @rand_addr=' \x01\x00', @empty, {[@hopopts, @routing], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 17:43:07 executing program 0: unshare(0x0) unshare(0x20000) 17:43:07 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) [ 404.514731][ T26] audit: type=1800 audit(1628271787.190:220): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=35 res=0 errno=0 17:43:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:07 executing program 0: unshare(0x0) unshare(0x20000) 17:43:07 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:07 executing program 3: clone(0x8014c800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:43:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) [ 404.917206][T14788] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 404.958574][T14790] loop2: detected capacity change from 0 to 87 17:43:08 executing program 0: unshare(0x0) unshare(0x20000) [ 405.087507][ T26] audit: type=1326 audit(1628271787.980:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14789 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0xffff0000 17:43:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, 0x0, 0x0) 17:43:08 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, 0x1c) 17:43:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x2010401, &(0x7f0000000580)) 17:43:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 405.229059][T14790] attempt to access beyond end of device [ 405.229059][T14790] loop2: rw=0, want=90, limit=87 [ 405.247141][ T26] audit: type=1804 audit(1628271788.000:222): pid=14790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/261/file1/bus" dev="loop2" ino=36 res=1 errno=0 17:43:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 405.350653][ T26] audit: type=1800 audit(1628271788.000:223): pid=14790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=36 res=0 errno=0 17:43:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setrlimit(0x0, &(0x7f0000000000)) [ 405.413826][T14807] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 17:43:08 executing program 0: unshare(0x0) unshare(0x20000) 17:43:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, 0x0, 0x0) [ 405.509912][T14807] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 405.623603][T14823] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0xf3, 0x0, 0x20, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001480)={0x5, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x44, 0x0, 0x200, 0x8, 0x8001, 0x5, 0x9, 0x0, 0xe59}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 17:43:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x2c}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xe70}, {&(0x7f0000000140)=""/85, 0x208}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x681}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 17:43:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/loop0', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) clock_gettime(0x0, 0x0) [ 405.768059][T14830] loop2: detected capacity change from 0 to 87 17:43:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, 0x0, 0x0) [ 405.899008][ T26] audit: type=1804 audit(1628271788.800:224): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/262/file1/bus" dev="loop2" ino=37 res=1 errno=0 17:43:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a001000000000", 0x29}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 405.980511][T14830] attempt to access beyond end of device [ 405.980511][T14830] loop2: rw=0, want=90, limit=87 [ 406.040473][ T26] audit: type=1800 audit(1628271788.800:225): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=37 res=0 errno=0 17:43:09 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r2, 0x0, 0x800000bf) 17:43:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f00000000c0)=@nl=@unspec, 0x80) 17:43:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x6, &(0x7f0000000080)=@framed={{}, [@alu={0x7}, @alu={0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 406.328603][T14855] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000000300)="bc", 0x1}], 0x3}, 0x0) 17:43:09 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000040)=@can, 0x80) 17:43:09 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000007540)={0x0, 0x0, &(0x7f00000073c0)=[{0x0}, {&(0x7f00000072c0)="9f", 0x1}], 0x2}, 0x0) [ 406.574859][T14863] loop2: detected capacity change from 0 to 87 17:43:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 17:43:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a001000000000", 0x29}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 406.689732][ T26] audit: type=1804 audit(1628271789.590:226): pid=14863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/263/file1/bus" dev="loop2" ino=38 res=1 errno=0 [ 406.756050][T14863] attempt to access beyond end of device [ 406.756050][T14863] loop2: rw=0, want=90, limit=87 17:43:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0x1, &(0x7f0000000080)=@raw=[@jmp], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 17:43:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee01) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 17:43:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 407.032931][T14882] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a001000000000", 0x29}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) [ 407.176199][T14889] loop2: detected capacity change from 0 to 87 17:43:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x9c0, 0x0, 0x100}, 0x40) 17:43:10 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x9}, &(0x7f0000000200)={0x7}, 0x0, 0x0, 0x0) 17:43:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 407.373039][T14889] attempt to access beyond end of device [ 407.373039][T14889] loop2: rw=0, want=90, limit=87 [ 407.532507][T14899] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x1, 0x0, 0x20, 0x0, 0x1}, 0x40) 17:43:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007980)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000001) 17:43:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a001000000000800000", 0x2c}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f0000000180)=@framed={{}, [], {0x95, 0x0, 0x7300}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:43:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x100000000000000, &(0x7f0000001380), 0x0, &(0x7f0000003480)) 17:43:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007980)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1b, 0x0}}], 0x1, 0x0) [ 407.937903][T14920] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 407.955009][T14922] loop2: detected capacity change from 0 to 87 17:43:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="70ae4f7bf7da962ca757ffad1f0d093a8d6924fef5b7b2cfd6b4956d3d9fb45ff36eec37c74fd15d03037c2faf1585550571048760edbb33dbf6d48bb4b6a0c00e8615a485157e51415281487a66230f378204dd71ff884563acb287e3abf8ff930d31f6a8e3c0e6411b4460f53ee8eb83e3da922bbc761862847ac6350a1ff8a6314264a0d0fc0cc318be2ddd9b5ad974a131921fdba2887f41cbd7be323e5c01b5af21064b3b0abae75b0a1c3c70dd44f18588e0db2514eb2a2a4055b77b80c9672f5016282dfb3ea7d083cc590943447baa76cf0e438ab2f9b223ea", 0xdd}, {&(0x7f00000001c0)="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", 0xfc}, {&(0x7f00000002c0)="7356a20cd2310ee3d19688e0", 0xc}, {&(0x7f0000000300)="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", 0x3c8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x8800) 17:43:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:43:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a001000000000800000", 0x2c}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) 17:43:11 executing program 3: r0 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8915, &(0x7f0000001280)={'tunl0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x20, 0x8001, 0x30, @empty, @local, 0x20, 0x20, 0x1ff, 0x4}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000208}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf25020000003000018008000300000000001400020076657468305f766972745f7769666900080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="200001801400020077673200000000000000000000000000080003000100000084000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e31000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="14000200636169663000000000000000000000001400020076657468305f746f5f68737200000000140002006261746164765f736c6176655f300000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x40000) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x6, 0x0, 0x3, 0x2, 0xa, @private1, @local, 0x7800, 0x700, 0x100, 0x4}}) 17:43:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) [ 408.737216][T14941] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0xfffffffa, 0x20, 0x0, 0x1}, 0x40) 17:43:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000007540)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000005f40)="e0568f3e9d8fb8835f93fb8cee1ebfb85453b446e4ee6ce4380dbd9f2ff59897eab21b4115d087d869fd4bb8b806e380a8d9c69ae630d22feeb3454baa7a64df934f2fa8751051fe529b0d7b0606c63405dffd6601c9502b0064488896a7640c025df54c8d1ebbf4ad1e256224fab0285bd9dcc0391379d310bcf71623202a3a5b402d538a9bec360119dcf61ecd5db7484d0c71d99a77c70ddfb63a24e11fea63", 0xa1}, {&(0x7f0000006000)="c434d633771f26d86e4a6c9a2c8b03d06e62f3acd3e1eed975870d66e13a7641befc9ec3099ecd0539216a82469cf68aef25082574cbb52f6d0859ae717b907441a5135e230c47fd492b90f0c63d97f90426ab068df828adba26dcb4c3bbe279893f5ddec966eb2a8bc4e919c80d7eb03733af593c6f2845048126af23cf18ba0533c3c09534927f63", 0x89}, {&(0x7f00000060c0)="5fffec7721bdb623036d628ad751608c2213b952c3a9c17148350e0008652846ca843c0a259539a2f8af66d1328c064031d503f570d26e97b2f9c50f015d38cb4ac2936ab5b6116dfa0a157af514f68dce8fdf322fd723f084962afbc6f06cb41b85c231d626ae04004e26f531e2c42f856507afc922ae60968fd0fb98b812d3ecd6a6b88f6c", 0x86}, {&(0x7f0000006180)="09705d57a373dd0233a585440e179989e70d99ecd1dfe282e924086523c4e65790ac7cf2f3c8ed635f2fa4639cab91a356a3d792da288726effd196e9f05d55c7ac8e72fd1e45b626ed4baca94a88f52c1b99d60e4e9dae0e4558ff56f3f146fd07156dc4fd1a2077318afa8ec0461139d1b3afb3c", 0x75}, {&(0x7f00000062c0)="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", 0xc9c}], 0x5}, 0x0) 17:43:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a001000000000800000", 0x2c}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:12 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) perf_event_open(&(0x7f0000002840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="230275964c4e4d3d148100000000000000753238b082fefad80103"], 0x141) r3 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000028c0), 0x1, 0x0) mmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x10, r3, 0x95aae000) close(r2) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x4, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00') mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x50, 0xffffffffffffffff, 0x65b41000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000300)) 17:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xffffff1f, 0x0, 0x0) [ 409.246629][T14960] loop2: detected capacity change from 0 to 87 17:43:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa6000, 0x0) [ 409.372068][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 409.372083][ T26] audit: type=1804 audit(1628271792.270:232): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/266/file1/bus" dev="loop2" ino=40 res=1 errno=0 [ 409.485934][T14969] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 409.554197][T14971] autofs4:pid:14971:autofs_fill_super: called with bogus options [ 409.650808][T14972] autofs4:pid:14972:autofs_fill_super: called with bogus options 17:43:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 17:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0x0, 0x5, 0x401}, 0x14}}, 0x0) 17:43:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="70ae4f7bf7da962ca757ffad1f0d093a8d6924fef5b7b2cfd6b4956d3d9fb45ff36eec37c74fd15d03037c2faf1585550571048760edbb33dbf6d48bb4b6a0c00e8615a485157e51415281487a66230f378204dd71ff884563acb287e3abf8ff930d31f6a8e3c0e6411b4460f53ee8eb83e3da922bbc761862847ac6350a1ff8a6314264a0d0fc0cc318be2ddd9b5ad974a131921fdba2887f41cbd7be323e5c01b5af21064b3b0abae75b0a1c3c70dd44f18588e0db2514eb2a2a4055b77b80c9672f5016282dfb3ea7d083cc590943447baa76cf0e43", 0xd7}, {&(0x7f00000001c0)="ce5c43a1fa567513de4b7a2ea4a444c314303207f77ca2a244a2a51ad6c2f28c2e6eecaae78133914d81f185dd5de608c830578657cca23b0b2b4189ac9b1bb205dc4212b85e77a766a3b9f7399f1b915861e415d44eb743aa15dfe3c0258aea1a87305831e3c55c9b2fa19d768b9fb804c67b2af2e7ce82cf540ef0a18438380df38c8955c59e751b17fe251e63936b5e25d698f353be77b039e9d85027747838bca8a569c8bd293482fce123213ce2a04f761e64ab4b1a8a982e61c5ee126f675d09ca998e4dff7a8007eb0b057d359b2a8bd45d37d82a9279626c4b3ae728980984c02eb85efdd0cfb2dd82f58d071d49bcbe6fff5cb9c0ccd490", 0xfc}, {&(0x7f00000002c0)="7356a20cd2310ee3d19688e0510f5842e3b3a3a555edcc", 0x17}, {&(0x7f0000000300)="bc33b076456f72375a00b588a4c37a1130de9b8518de4ab839bfbafe3cfc1bf568ee35d61266e0b2b2a475b568f78ee9a0e89177f7c9e1d390dca1e5184cbd2fed9931ed62d29a7836d74d584bdb76a496f396325408d07bcbddcd41c6167abd024c51ddf0680f6653427304881476d9ce022dfeaabec6a232f281400895752ab0853bc5d2c286d94a5d9ee8c4b0c27a2c6998edd67c79e93d44089225fc981f090eb197c3e14a69b5f4fc33e2fd8c6d0be1a9c7e8fe49f16c3b7bca21d4b1ab2d08eb9703051143cd2034b81d1e1946d6d958ab33266a0c729bb07da4d1c1824b96e8e8a1ed34395fae5c8e6b0b20d27ef9b12ca37d8b1587352badd496621362609e834db5449862c4aba129d7154a39c64fece722b464bde2e090aeb8aea53b7134520098a7b1e78ad6e32b373bc2c5ebba8fe055aa5b5c287484f8f3a9879bc3d3e5f1f3983e1731d7f85a2b2a09aa1b3dd63126e7caaa3ececafbed1f1949b0ca5924e0373e6776c44e745864fbae872aafc4f93140bdda9940a6c31fa11a58aec9195dc3a3e444aae0b8b0fb19e3a7bfdbe1631be8bd5f31eca0085bd75a1029be78c096001a9575ec578197c7c0a6843d367be511e4e0e6e30264cce17bfc822d00200b3d7ef590406997efc8a952264e2a6e63361a6513877694ce522faf2a7f1fac5e27b41805793ace05447e2cb90a24848d83b07e1208da8696b900dfbea03e12e4e81e52cebafbd311e31b4e6ca40183516e243722e379536a8eaca6128ad410bbbde97d1198efab887e5819f329e008b6f16da6f9d63fe5f7089656345ea653ac4d682e598268ca8a3268edd32c27d4a63ce36d1fa352bd09e73c5b928245a35d41ca60c7738d75fe50f7e435e2376e9970fe2274014b8f4dcceae45e3d15a4abe4e5338f023735adbf8aaccfa592fb31547f862ac22d76e0e8b2159421ad7bdc51bf0bb77cc716acf1cbf0437ec6483c62dde8d63c02d13e9a14118475a646e2395357e46ef7783e9be3a9fa2decc6c23d2f003699d5dfc19f4ee518f911b148ad94b84ed838380ffbbbc89d01fb98959b6bbdaa2b76d3ed0e5230c37deb6fed4377acb2f50566f3a19aaaa6a79f88045124991cf08eac7f3eeb06e56fa913c71e8e58ef4001939a4168045145b03f1d2e5999fbb66ab12dd31540019516154216a0ca3565e15fb776024882d7db3168338294dc2e19cbdeec92067020e26b6d08008e0e487b680743ae8b477aa5f9081b24abf1752b3c1a39c12c37367bde2081fad405a038875113b8a5733e93c000070c59b888f6e0bd49825d91c0982b394886577e84ed587f8a04efebc647954586908ed5b369e730f5a2954a", 0x3c3}], 0x4}, 0x0) [ 409.783953][T14960] attempt to access beyond end of device [ 409.783953][T14960] loop2: rw=0, want=90, limit=87 [ 409.786518][ T26] audit: type=1800 audit(1628271792.310:233): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=40 res=0 errno=0 17:43:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a00100000000080000012", 0x2d}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x3488, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x20, 0x700, 0xfff, 0x7fffffff, {{0x2d, 0x4, 0x3, 0x7, 0xb4, 0x66, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @lsrr={0x83, 0xb, 0xb8, [@multicast1, @private=0xa010100]}, @generic={0x83, 0xb, "fdc2b38c009ced79ca"}, @timestamp_addr={0x44, 0x24, 0xe0, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x7399}, {@multicast2, 0x8}]}, @cipso={0x86, 0x19, 0x1, [{0x5, 0x7, "be77b46a68"}, {0x1, 0xc, "0e1ed4a84828bbe355bd"}]}, @ssrr={0x89, 0xb, 0x9e, [@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xde, 0x3, 0xd, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x7}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@multicast1, 0x7d1cf944}]}]}}}}}) 17:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0x0, 0x5, 0x401}, 0x14}}, 0x0) 17:43:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1, &(0x7f0000000000)=@raw=[@exit={0x95, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 410.208266][T14997] loop2: detected capacity change from 0 to 87 [ 410.209587][T14994] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0x0, 0x5, 0x401}, 0x14}}, 0x0) 17:43:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a00100000000080000012", 0x2d}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 410.327999][ T26] audit: type=1804 audit(1628271793.230:234): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/267/file1/bus" dev="sda1" ino=13954 res=1 errno=0 17:43:13 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) perf_event_open(&(0x7f0000002840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="230275964c4e4d3d148100000000000000753238b0"], 0x141) r3 = openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x10, r3, 0x95aae000) close(r2) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x4, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00') mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x50, 0xffffffffffffffff, 0x65b41000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000300)) [ 410.476638][ T26] audit: type=1800 audit(1628271793.270:235): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13954 res=0 errno=0 17:43:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) read$alg(r0, 0x0, 0x0) 17:43:13 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000007540)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000005f40)="e0568f3e9d8fb8835f93fb8cee1ebfb85453b446e4ee6ce4380dbd9f2ff59897eab21b4115d087d869fd4bb8b806e380a8d9c69ae630d22feeb3454baa7a64df934f2fa8751051fe529b0d7b0606c63405dffd6601c9502b0064488896a7640c025df54c8d1ebbf4ad1e256224fab0285bd9dcc0391379d310bcf71623202a3a5b402d538a9bec360119dcf61ecd5db7484d0c71d99a77c70ddfb63a24e11fea", 0xa0}, {&(0x7f0000006000)="c434d633771f26d86e4a6c9a2c8b03d06e62f3acd3e1eed975870d66e13a7641befc9ec3099ecd0539216a82469cf68aef25082574cbb52f6d0859ae717b907441a5135e230c47fd492b90f0c63d97f90426ab068df828adba26dcb4c3bbe279893f5ddec966eb2a8bc4e919c80d7eb03733af593c6f2845048126af23cf18ba0533c3c09534927f63", 0x89}, {&(0x7f00000060c0)="5fffec7721bdb623036d628ad751608c2213b952c3a9c17148350e0008652846ca843c0a259539a2f8af66d1328c064031d503f570d26e97b2f9c50f015d38cb4ac2936ab5b6116dfa0a157af514f68dce8fdf322fd723f084962afbc6f06cb41b85c231d626ae04004e26f531e2c42f856507afc922ae60968fd0fb98b812d3ecd6a6b88f6c", 0x86}, {&(0x7f0000006180)="09705d57a373dd0233a585440e179989e70d99ecd1dfe282e924086523c4e65790ac7cf2f3c8ed635f2fa4639cab91a356a3d792da288726effd196e9f05d55c7ac8e72fd1e45b626ed4baca94a88f52c1b99d60e4e9dae0e4558ff56f3f146fd07156dc4fd1a2077318afa8ec0461139d1b3afb3c", 0x75}, {&(0x7f0000006200)="51a9dd2e56ce6976bdcb1455a9d53dfb3a780db82ee74441dce536a8aa9457ebd7c8d0c87b2e2b82a3d21470e407099d59c3d99ade189936f33b54eff2445b93e51ce7e3ddb6a6a46f98f4059af4237e6604a93a3c8f7b6b45c2cd80d9959f669429c563020611a4c9e1d5762ad000044a2d", 0x72}, {&(0x7f00000062c0)="b6def3df99bde2275681fe31b9170b3a23af3cafa35259c6003387ca4a50ab103a70d0083eda63b9715990c8b8b1c48c872479c14d45d27df5825336329b6c10e6653e431cbd407b70419b2e256d4bca155625148b943249b33dd6ab7746d1173ffdfe07d4b012792dc9cc894254eb8eee02c6ea8241b4f276bdba1440e5999c7b92347c336334753d6a89a05d845f5713cd51520f2559f7926ecd5ed959fdcf161c0afb0c493754085e3940d515a1672bac9f211ba79e4cda37effc20f92054226add2567f15f93e8cdd0991fe165b8b21fe7ec6e24744f47b2c9ea3a9f719a85405553cd7bc91cb007defdb90238489f12773cdbe8b0ffa78aef19c4dcc710d7c44bd8eae8b95ae2111562a94e95995e951023b6bcae67bd807dc42226cb27c0e6e012d5515759142629b8ad0e7f30754220992bec3af94841552880cb85b1622edd082d7722488766e0aadaa5786e438ceb82513356ca637dda88ff0450cdb33a5f8b37507a89d95fbac99e3f3435776ea161a48042b5cfd1a05e646bdc127eeb1b34898816106d3ea4e9e62441fc0a4f4cfe11dcf28737f707ea85465f3f3b685d46c24f3ac9c803c4a9adaafc04422eccb2e711ab4af12498347df28913b9d48acd78e9111409a64b44a5f6371c8e9a7895544e35a16fce047844b338518f7bf0af689d50f6f219c73ace42a90ff4491aef31e5150010ec5ccdeffe5ecc2dbbfa5a1a928f546f407ef4b3b9ff4576db6d8614796324a0a4df963b3fedfc2e875b7426bdce52309f55f3eef226d072ee1d2239fa52f766df5324b1c4d88eb3414b99b3789bffd960a8f82446e0b6928562b3548e4f1de3f3fb37b3a5732f4d376b8540345aac4b61af949f0b3f747df0e902dd90167abd602904194a506fa54877e03b0739b30f5f99591029f76436f7ad697a5c050c93c075d68552342862489269bb515862c8d2252d58d0107496617de8daf498ed069eae3cf07ec23b024036a163f98ad813beaedb88698078167fbe0c0f2cdc87d1c4ba8b2a3f93b2aec317acf888c4730cf86f61fda30a4c1fe1ceffd5c295e265c077a094cc11bf2bfe442738683a1e5e492c31e390668979cddd1502b8de6a8c5e3c9feed40d21b05301d577740c4cf2713efe77a0f7a01c1574ca999a0c1505fa899093608cac10c741eb9e031603ff45dc0c27e90d78a12a7d268263784389c87a6cd4ec56b77ade5e4c9c0de9312ff955a586493fd1c55e5a2242ee9b182dc925d1ba6b32005a5e02bf5434ea2ba1e619d712987ac5b1c5e2a2cc760182f564881a2495da59921400dbe19ca58d72736b4f7bfec178b44dcbe49d121bbbe0a35a2531a89ec4aef5ecb438557e724cc1674d7c25b439aaa4a2db21a5af59a9b41c1246657bfe6432b44895263d49c676aea0b06c3b9d02fbc12888eb0ffb6a14e3f4a85de246b47c27904f0f8b5de6296a254a90d054eef8b02c38e3b32c43f77daa246da41f5e039a56fe13cce810d7a3e19525f09cbc28e85524ad167b1af7ea83b2b0f2871b0cc5dc67e990ff2fcc3557d23c6f80f52ab673d1b40326ef5b13cb0a85b63b349b8598b811b8e78308bc2e25d332cd92e86473c6ff328ad60f8f90e474456d5920d281df1040ccb783bc14c3e13ba4ee78803cb9a62c510af40bca9ceb272d07fc5f951b6876dae29e5dad60044b6ddff5c7546930ba88806dab1ef5ef2e0faf20d30b18f8bf671c8f37f931711d1bb498f8c9454fd03cd376c58097cc9459812184dee25a58beb9420d2c3b3dc9b2f6119c2ea59b32d0093b4c34f3e4949de695647c7ae04ed8ce90413bc5b8d279a732650285e8fd92fb95665ba40cccd39425991426c3bcc6eaf1d30613a5e5bb9e1d10aa82db9a9eacca63ce2028d79f5fd4d5e1dde82022748958e826bdfc1168ea0c9b9efcccf6c0a76dc923e4fc9b7f3951eedc0bd262701c8df65c700f2f0811b08750967b4446bfa7aa0233f5e22094bddce8d24c24fb150e0731db146183ceea6b1bec2645c640145075508d4b6b2f631f40d0aa2b96e60132b4aa63c8588522e1f993abffa25d0b3299b7bcc64b3e4264625361e982d613326734c1f36d0a4215f9b410ed304160f26563717779b7584cfe307a7222ed4dd8191292451f64c45154e4dd4d23415d31c215975cc6f6ec7dca4a28a444758bc832b55c48ebb179018f969c2e7b28b673e4637d806e94e79d58045a4a5363e3e280584677773700bab9d51d667a0604196b8ea449ed5266a5d0c02461145b6b133a5cc6d99a20fd5dcdede48b36577e00450903b18e907a5bab2a5ab31f2accb759f438ea9330668ad28f37165aeec6b163008f6e32a368af9a1d7f8b1ce9a13dcff3cfb20b09e9e189fe4e661be698c0b72363306d49ab5155acec5512fc98e78ce4d1837621a334d344f79987a9b20cb86be59764dd1ddaf3b27a2e075e8b3006cc844faeb0b1086394dd37f81266f7a6ada21b133f8b22253a80c770ed5624d3a00860effaf412f32b8184662eb8eac340409a417ff9e0b9cabec0ec80eebd360d8377518e4b56ae84d3a812ef9380b860c40c69bebd92f94efdb8bdb322e7e5017f3119675d2cec28402ec018e47aaf14b1c898fb15e3151194d6a98733405734409a5b8a800b4002912e9c618f5ef8cffaad6fff9d773e1bc5b21b789343b91783abe3f3920044a8bd5649858570c426c7cd102c448c4d8f5522082df4d95649bb2e8b434dea8a35bb2c5680b8c266a7932e86e0ebc6caaa20c2f074cebe7db435cb1a79e44a4e22a2acfd7fc5bccb888050bdc8107f40a6a667b614a00e7cc89aeea915656d716ef7c0edaf098e64fbaea5e36c8d99dab0b9d94c071998d3bb0e26e9fdaba70f4c804708853dcb7461ec7390531934e29d56186b68606d942709981f6460f37364ca611df7b38875f2d4ceb594f2adaa106e557f2521fbb579533117acd3b6460a3b2efa1ea5874a5679f9e972b35c5d679a631c0ef1fd8d415ad12c5d4c6ac7f25fb81806b9f555ef91069047074b5568a7d5a3282ac2145518e55fe8012c0dda4941dbd2eb78a73698f23fca91eb049ff210b92c6805c80b9d3e0410e7fd626bf5d0280c476068fa92a980f1e81dabaf96cf87c194f21e2d812e4f843eb8b4ae36571a6f7514c88165c35b95d59074a8d5c2d6c9371fb1037313802352e30e78bc00557cc6040f0c36cd9211c4008bf0fa13aa8fedd88234adbaaecc4d16972916d5bfe5c7d1bc36eb7c70944f0153fba29243a16ccab046e562953387ed79d937dec21d7419d87abe6e763c3e54a5ee93d2c0a828b954f941827f679c564187486767e61dc8a857946771a3cef9f1c6d2ac1c5043792853b668f3dd84a687deec0191d4f8b43ecddb9b50263d063586b34b3806c4ef03d867e395db9eb6cf2811bac537a8e222d86281a41c7bfb7b0b9307f4fdb9d07a2668b2599df77e1345cdb3299da7171a7ad3363a19f3fc0ff6419e585c4c9e95a894ed3301fc28203cdd333116208cc218daf02eedfb7dd37a6151cfaeb22e2b4b2d48b6ee95193831fe1e475b39fc4578d08340c5afa072649ac42e4a561c4dca3bc210e0fc4f35461c50946251537f1662349b9a9317c1b8eb07498ea44585f10206f654de9e23f5a79f12085d37533097a22aa6b2c7941f41edf2622cf0e273686883dcaab0c29caf8182c9378cb4039f24ef0c007706fb61956e817ef183b77e7e641d4ade46710eda315a1cb8db14c746bb0d126644def65769f2418ddb4865fbffb119b16affe7d042ec8f39e2d7a71c77878948c63d7d90e0e7335e5c760a792d78d3c105b73a8d2699850427f31f52240cf954e5aea8e9c11b9a3459744b00948684bbef6eae59a41251a28e26af25353b4c5291c712815b5bd834e2dafe3ad82f1909581dbb3c24bb265a65c43d6d1347d99ab82b42b84bb0610207e3b7d59327c2110c6735c3d175abbf17e074bcb3f9fea7fecc16a31228556f800044b2b8d95247c6f7100676bfa26cc7ebb55e9bcce55347f9b87d6949270e3bc64418c67d89c1405020976ab8673bfd1841fb7947dc36a1bdb05a106fa1b9c062bd4ef13c2398a01dd0217a35533a286e34ee12b41e9ed9e804517b9d24cdfec0765c7a43fa8b407bbcb875dd0c1a079ab6dc373e05bf9ffed2a7796aa5e333235a278313ddcad00fa5e576fdb0dbb5f1dd7c1dfc71c588d76357de6912ad57de5b1330a8b38133d1af3abebacfd90135109b27d18db941a2bae7606801557bf5094501d4f11c7aa381d8b9043dfb0d445ba256542a9515eb24af3add8ba080cd76960a0bc5eddf86de6c55f2c77c7cdb19f2ee8724d1084d068d1f1d144067accea7bdb0221ee4dcff47ba32b518885bf1729fb45726c12749dfb529ed", 0xc2b}], 0x6}, 0x0) 17:43:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) [ 410.662072][T15014] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 410.979092][T15019] autofs4:pid:15019:autofs_fill_super: called with bogus options [ 410.986323][T15023] ptrace attach of "/root/syz-executor.4"[15016] was attempted by "/root/syz-executor.4"[15023] 17:43:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:14 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x7) 17:43:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a00100000000080000012", 0x2d}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x0) 17:43:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}, {}, {}, {0x0, 0x40}]}}}]}, 0x268}}, 0x0) 17:43:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12}, 0x40) 17:43:14 executing program 4: pselect6(0xffffffffffffff40, &(0x7f0000000500), &(0x7f0000000540), 0x0, &(0x7f0000000600), 0x0) 17:43:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1793"], 0x20}}], 0x1, 0x0) [ 411.326248][T15040] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 411.349092][T15042] loop2: detected capacity change from 0 to 87 [ 411.413772][ T26] audit: type=1804 audit(1628271794.310:236): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/268/file1/bus" dev="loop2" ino=41 res=1 errno=0 17:43:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 411.610121][ T26] audit: type=1800 audit(1628271794.310:237): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=41 res=0 errno=0 17:43:14 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88442, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0xc, 0x0) 17:43:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 411.677123][T15042] attempt to access beyond end of device [ 411.677123][T15042] loop2: rw=0, want=90, limit=87 17:43:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x9c0, 0x6, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 17:43:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}, {}, {}, {0x0, 0xfffd}]}}}]}, 0x268}}, 0x0) 17:43:14 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind(0xffffffffffffffff, 0x0, 0x0) [ 411.870488][T15061] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 412.042784][T15061] team0: Port device team_slave_0 added [ 412.074143][T15071] loop2: detected capacity change from 0 to 87 17:43:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}, {}, {}, {}, {}, {}, {}, {0x3ff}]}}}]}, 0x268}}, 0x0) [ 412.103502][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:43:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="70ae4f7bf7da962ca757ffad1f0d093a8d6924fef5b7b2cfd6b4956d3d9fb45ff36eec37c74fd15d03037c2faf1585550571048760edbb33dbf6d48bb4b6a0c00e8615a485157e51415281487a66230f378204dd71ff884563acb287e3abf8ff930d31f6a8e3c0e6411b4460f53ee8eb83e3da922bbc761862847ac6350a1ff8a6314264a0d0fc0cc318be2ddd9b5ad974a131921fdba2887f41cbd7be323e5c01b5af21064b3b0abae75b0a1c3c70dd44f18588e0db2514eb2a2a4055b77b80c9672f5016282dfb3ea7d083cc590943447baa76cf0e438ab2f9b223ea", 0xdd}, {&(0x7f00000001c0)="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", 0xfc}, {&(0x7f00000002c0)="7356a20cd2310ee3d19688e0510f5842e3b3a3a555edcc", 0x17}, {&(0x7f0000000300)="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", 0x959}], 0x4}, 0x0) [ 412.181381][ T26] audit: type=1804 audit(1628271795.080:238): pid=15071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/269/file1/bus" dev="loop2" ino=42 res=1 errno=0 17:43:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="d7ce23805f49577d76753968c3fafeb0610ec7a82b3f4f2702cf8e1396fc8dfce991dbad56999e4f65cbae4929cf6472388225f510e282782d67bc2ae5a9bf0904974aaef8bde84b8c963faa8e8d457414b215933b3446ede7f036e91b3ad7448b3417b075df5a5f582e811a9cfcf0835283818ded69ec51ae8ca824529501421f25a0aa9a33571755b519b255838f6943814e4999a311df57e69f7ad70922019ced318d04e38128430b905810ae9c38f904546cb49c207b3be6b31451efcc23", 0xc0}, {&(0x7f0000000140)="66662eca3ce8efd1d2f270e3badf80261a9d0e6b6d8d375362b381e8d323bda77b64834d2b5419d22e660ec7b2c7d5e2485a3e3f560f2970e7438b37cc515d6e8f0ccc550a4348dcbf68eb67f57e43a6cf51a9b5b6a91cde4674e40c399e1df665", 0x61}, {&(0x7f00000001c0)="9979b96cd107cacea2e55c1bfc410e03ecbc61d2c832ebf3b75b45b626944969ac5d796a22bcd0d1f135865f4d85576f66c66f3f33227113d486862454c79386b0fe58b9ede1c69f823653", 0x4b}, {&(0x7f0000000240)="e1f513ce996a4b81ee32ee322cceb52a226f717d608682c4fd34aec7f7b2f563e4bb64b524ebca70587c26519ccedc1f212553d9fba459af31434ef954f3fb1a94b5b4eaa99c3897818cad4b41427e752be625169f9697", 0x57}, {&(0x7f00000002c0)="202d33301b246b92f5f631bf71ee5170e0ef4a9705aa83e0e0636fbbce3d6e620f85f969ac616aed955534fbd9ce7d0a", 0x30}, {&(0x7f0000000300)="e34c4e7bc623248cef1325e82eca03b3bbc46e1816441356e1fe6c003c77ac1efa453755a6a9860eb32c98896516ab17dc5d2f11a9962de3d5ee48d1f600e148a9ad1f3c6f2eb45e7189f2aa2a6b1e51769ebaf46337899b854ed85491a9c05806bf96dcd4e5dbffd8032e202174e34d2f509317bb887f8d6c4fe96ec389141200ad93f5315bde7de3941be6606a705721df98ad9a9cd8398b6c2b8406384611a5abb24c2f48faf5ce7a57b5cc90d8672f0a11650e0c440fe4", 0xb9}], 0x6, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @rthdrdstopts={{0xfffffffffffffef0, 0x29, 0x37, {0x0, 0x12, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @generic={0x0, 0x87, "6ab603d9032598e96ef60209d7a14002f20ba0d3641a22f33854ff34e429d46f4fbb1bf8d2399754a3c333e1da7066ad805d88d3539240e17d3dfdafff123bfd1084bed5c49003eb5f937f572446b5142a767bc98de1836b0fffa77f665aee3a404a10ec672758684c937e01ba464ce73b59c092dab292bbdeb03442ec5e731ab811a9e62f0e41"}]}}}, @hoplimit={{0x14}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x0, 0x0, 0x0, [@loopback, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x138}}, {{&(0x7f00000005c0)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000600)="ac22da0a5b4bd089c3", 0x9}, {&(0x7f0000000640)="45266775380a0083f95157d3faf6384188e760ea8247f8c341ae0be0390b95da546c71a40c4f301ab352ce0f3d346b5b99c41cae6954f0b1a10145987dda3e1e248e131801451b819bc4d0940ca1a06fdbb9321338d303803e8e862e4b30f3551826df2fab658fd8e31b358326a29da9aed51090e2823d00f4abcf129232abd8e0b907e53377b911df7eb282b70b47376c9d43f4792e8552509b825312fd6164c6ee76b7f62ee7ac5fae0ef6198cb4e6ded64d5105d76e38", 0xb8}], 0x2, &(0x7f0000000740)=[@hoplimit={{0x14}}, @hopopts={{0x18}}, @flowinfo={{0x14}}, @tclass={{0x14}}, @hoplimit={{0x14}}, @dontfrag={{0x14}}, @hoplimit_2292={{0x14}}, @dstopts_2292={{0x1048, 0x29, 0x4, {0x0, 0x205, '\x00', [@generic={0x0, 0x1000, "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"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @jumbo, @ra, @enc_lim, @padn={0x1, 0x1, [0x0]}]}}}], 0x10f0}}, {{&(0x7f0000001840)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001880)="7cdf378f6cd35229ce56520e6a2ead283d0f6463ceb7e0bf9d17c230d08bc06a79b84e4546ad1b71df0baff59dbb4a1a85726a955c6fc9b17b9cf59192a64f1a3bd2a9f13061ba6ae23edcc85e9c5debb84c3422ee818dae7762725587d439db938853ce025af98f299432be9e076716ac416f2985278a762e79393d5e778929857b5900d4a0432d8b845af763fececa6e2eff43bcf9fff31660af2a990a5048a2a41be651", 0xa5}, {&(0x7f0000001940)="39c511af00031d0ee6e4d038b9ed68450f332326ef270e9142f42adea46af4c3b3b558b0ccf0dbd32f5fce9de85ffaafe7463e46b3890b1a2744cd16ea9ed7e98cabe326a7269559ff33bb45d1e8d72160dc57a4e946a73105ec850b8786d0e8f49988825d22f7a16c912a2baedef738585040d95845", 0x76}], 0x2}}], 0x4, 0x0) [ 412.352705][ T26] audit: type=1800 audit(1628271795.080:239): pid=15071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=42 res=0 errno=0 [ 412.449977][T15071] attempt to access beyond end of device [ 412.449977][T15071] loop2: rw=0, want=90, limit=87 17:43:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}, {}, {0x0, 0x0, {0xa4066cfac8bb9101}}]}}}]}, 0x268}}, 0x0) 17:43:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x16, 0x0, 0x0, 0x3}, 0x40) 17:43:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 412.590262][T15085] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:15 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind(0xffffffffffffffff, 0x0, 0x0) 17:43:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}, {0x0, 0x0, {0x0, 0x5}}]}}}]}, 0x268}}, 0x0) 17:43:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0}}], 0x2, 0x0) 17:43:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 412.860135][T15099] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 412.912838][T15104] loop2: detected capacity change from 0 to 87 17:43:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}]}}}]}, 0x268}}, 0x0) 17:43:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) [ 413.018131][ T26] audit: type=1804 audit(1628271795.920:240): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/270/file1/bus" dev="sda1" ino=13922 res=1 errno=0 17:43:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) [ 413.199624][ T26] audit: type=1800 audit(1628271795.920:241): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13922 res=0 errno=0 17:43:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, {0x0, 0xfffff801}}]}}}]}, 0x268}}, 0x0) [ 413.316922][T15120] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 413.352069][T15119] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 17:43:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) 17:43:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x4}, 0x40) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x567d, 0x0, 0x0, 0x44}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_TEE, 0x0) io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x6251, 0x4, 0x1, 0x38d}) syz_io_uring_complete(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x2ba, &(0x7f00000001c0)={0x0, 0x99a, 0x1, 0x0, 0x29e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000380)) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000180)={0x0, 0x3f}) 17:43:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {0x0, 0x6}]}}}]}, 0x268}}, 0x0) 17:43:16 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind(0xffffffffffffffff, 0x0, 0x0) [ 413.857992][T15131] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25557, r0}, 0x78) 17:43:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}, {}, {0x0, 0x0, {0x1}}]}}}]}, 0x268}}, 0x0) 17:43:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a", 0x2e}], 0x1}, 0x0) [ 414.193271][T15146] loop2: detected capacity change from 0 to 87 [ 414.506760][T15156] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 414.556777][T15146] attempt to access beyond end of device [ 414.556777][T15146] loop2: rw=0, want=90, limit=87 17:43:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}]}}}]}, 0x268}}, 0x0) 17:43:19 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000007540)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000005f40)="e0568f3e9d8fb8835f93fb8cee1ebfb85453b446e4ee6ce4380dbd9f2ff59897eab21b4115d087d869fd4bb8b806e380a8d9c69ae630d22feeb3454baa7a64df934f2fa8751051fe529b0d7b0606c63405dffd6601c9502b0064488896a7640c025df54c8d1ebbf4ad1e256224fab0285bd9dcc0391379d310bcf71623202a3a5b402d538a9bec360119dcf61ecd5db7484d0c71d99a77c70ddfb63a24e11fea63", 0xa1}, {&(0x7f0000006000)="c434d633771f26d86e4a6c9a2c8b03d06e62f3acd3e1eed975870d66e13a7641befc9ec3099ecd0539216a82469cf68aef25082574cbb52f6d0859ae717b907441a5135e230c47fd492b90f0c63d97f90426ab068df828adba26dcb4c3bbe279893f5ddec966eb2a8bc4e919c80d7eb03733af593c6f2845", 0x78}, {&(0x7f00000060c0)="5fffec7721bdb623036d628ad751608c2213b952c3a9c17148350e0008652846ca843c0a259539a2f8af66d1328c064031d503f570d26e97b2f9c50f015d38cb4ac2936ab5b6116dfa0a157af514f68dce8fdf322fd723f084962afbc6f06cb41b85c231d626ae04004e26f531e2c42f856507afc922ae60968fd0fb98b812d3ecd6a6b88f6c", 0x86}, {&(0x7f0000006180)="09705d57a373dd0233a585440e179989e70d99ecd1dfe282e924086523c4e65790ac7cf2f3c8ed635f2fa4639cab91a356a3d792da288726effd196e9f05d55c7ac8e72fd1e45b626ed4baca94a88f52c1b99d60e4e9dae0e4558ff56f3f146fd07156dc4fd1a2077318afa8ec0461139d1b3afb3c", 0x75}, {&(0x7f0000006200)="51a9dd2e56ce6976bdcb1455a9d53dfb3a780db82ee74441dce536a8aa9457ebd7c8d0c87b2e2b82a3d21470e407099d59c3d99ade189936f33b54eff2445b93e51ce7e3ddb6a6a46f98f4059af4237e6604a93a3c8f7b6b45c2cd80d9959f669429c563020611a4c9e1d5762ad000044a2d", 0x72}, {&(0x7f0000006280)="2401a00dca2cfbf817c90f82cb0879194daec4df1766a3fcc51530e12333d64b60d7fb9b6c9557", 0x27}, {&(0x7f00000062c0)="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", 0xc14}], 0x7}, 0x0) 17:43:19 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x9c0, 0x6, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x40) 17:43:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) 17:43:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}]}}}]}, 0x268}}, 0x0) 17:43:19 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind(0xffffffffffffffff, 0x0, 0x0) [ 416.771351][T15180] loop2: detected capacity change from 0 to 87 17:43:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}]}}}]}, 0x268}}, 0x0) [ 416.918423][T15191] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 416.942895][ T26] kauditd_printk_skb: 2 callbacks suppressed 17:43:19 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f00000000c0)=@caif, 0x80, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x700}}], 0x1, 0x0) 17:43:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7ffffffff000}}, 0x0) [ 416.942910][ T26] audit: type=1804 audit(1628271799.841:244): pid=15180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/272/file1/bus" dev="sda1" ino=15043 res=1 errno=0 17:43:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 417.184631][ T26] audit: type=1800 audit(1628271799.841:245): pid=15180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15043 res=0 errno=0 17:43:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) 17:43:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x14, r1, 0x611, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 17:43:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {0x0, 0xce0a}]}}}]}, 0x268}}, 0x0) [ 417.363192][T15205] loop2: detected capacity change from 0 to 87 17:43:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x16, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 417.468511][ T26] audit: type=1804 audit(1628271800.371:246): pid=15205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/273/file1/bus" dev="loop2" ino=44 res=1 errno=0 [ 417.683798][T15215] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 417.727750][T15205] attempt to access beyond end of device [ 417.727750][T15205] loop2: rw=0, want=90, limit=87 [ 417.745394][ T26] audit: type=1800 audit(1628271800.401:247): pid=15205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=44 res=0 errno=0 17:43:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x5, &(0x7f0000000080)=@framed={{}, [@map_val]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{0x0, 0x0, {0x0, 0x6}}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}]}}}]}, 0x268}}, 0x0) 17:43:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x20}, 0x40) 17:43:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) 17:43:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x5, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 418.091093][T15232] loop2: detected capacity change from 0 to 87 17:43:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x2c, r1, 0x611, 0x0, 0x0, {0x5}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) 17:43:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0xf}, 0x40) 17:43:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0xe3, 0x0, 0x0, 0x0, 'syz1\x00', "d4ec9b2774c10195cd86afb6c07aa9f9d067bad79e7ca7b5a64bb847d664cd2a", "681a39052d976a10d1c4c86c139f354200ae27c7e7ff6df7f76989c2f36f6ab3", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0xfffffff8}}]}}}]}, 0x268}}, 0x0) [ 418.212110][ T26] audit: type=1804 audit(1628271801.111:248): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/274/file1/bus" dev="loop2" ino=45 res=1 errno=0 [ 418.354488][T15245] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 418.424043][T15232] attempt to access beyond end of device [ 418.424043][T15232] loop2: rw=0, want=90, limit=87 [ 418.516683][ T26] audit: type=1800 audit(1628271801.151:249): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=45 res=0 errno=0 17:43:21 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000080), 0xfffffffffffffec0) 17:43:21 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[], 0xa, 0x0) 17:43:21 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) 17:43:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "2e862fc02026f362b6eacbfc1bc5d41764990e5621adc549d4afc400cc08da030a2b68aea83973d50a8020c601ac05b7fb57cabdaff602085d69c41276b3ffe12cbe00f50e1483d78865159a47595b0acb81f870798fb28b69c75134dbeb0a61912fc6a8baf6b38adfc1b6096d518665f34e61bcd5439720e81bac2bbde1d6c7cc4451a922683d94de0376f82734735328efe13bcb91386819d87f411148af1352dd5524e7e431dbb0e7dd7dda15f76c5fa93b43d81718d7b5def57b82b178626b88df74199b19b5587d79620c21bfcdbac36d7c62a1ddf393743ab3bbce92db72aaa091e209efb9aa59fc1606de323e9a50fd641462c26a5ad8634b"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:21 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000007540)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000005f40)="e0568f3e9d8fb8835f93fb8cee1ebfb85453b446e4ee6ce4380dbd9f2ff59897eab21b4115d087d869fd4bb8b806e380a8d9c69ae630d22feeb3454baa7a64df934f2fa8751051fe529b0d7b0606c63405dffd6601c9502b0064488896a7640c025df54c8d1ebbf4ad1e256224fab0285bd9dcc0391379d310bcf71623202a3a5b402d538a9bec360119dcf61ecd5db7484d0c71d99a77c70ddfb63a24e11fea63", 0xa1}, {&(0x7f0000006000)="c434d633771f26d86e4a6c9a2c8b03d06e62f3acd3e1eed975870d66e13a7641befc9ec3099ecd0539216a82469cf68aef25082574cbb52f6d0859ae717b907441a5135e230c47fd492b90f0c63d97f90426ab068df828adba26dcb4c3bbe279893f5ddec966eb2a8bc4e919c80d7eb03733af593c6f2845048126af23cf18ba0533c3c09534927f63", 0x89}, {&(0x7f00000060c0)="5fffec7721bdb623036d628ad751608c2213b952c3a9c17148350e0008652846ca843c0a259539a2f8af66d1328c064031d503f570d26e97b2f9c50f015d38cb4ac2936ab5b6116dfa0a157af514f68dce8fdf322fd723f084962afbc6f06cb41b85c231d626ae04004e26f531e2c42f856507afc922ae60968fd0fb98b8", 0x7e}, {&(0x7f0000006180)="09705d57a373dd0233a585440e179989e70d99ecd1dfe282e924086523c4e65790ac7cf2f3c8ed635f2fa4639cab91a356a3d792da288726effd196e9f05d55c7ac8e72fd1e45b626ed4baca94a88f52c1b99d60e4e9dae0e4558ff56f3f146fd07156dc4fd1a2077318afa8ec0461139d1b3afb3c", 0x75}, {&(0x7f0000006200)="51a9dd2e56ce6976bdcb1455a9d53dfb3a780db82ee74441dce536a8aa9457ebd7c8d0c87b2e2b82a3d21470e407099d59c3d99ade189936f33b54eff2445b93e51ce7e3ddb6a6a46f98f4059af4237e6604a93a3c8f7b6b45c2cd80d9959f669429c563020611a4c9e1d5762ad000044a2d", 0x72}, {&(0x7f0000006280)="2401a00dca2cfbf817c90f82cb0879194daec4df1766a3fcc51530e12333d64b60d7fb9b6c9557", 0x27}, {&(0x7f00000062c0)="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", 0xc0b}], 0x7}, 0x0) 17:43:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 17:43:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x5, 0x0, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:21 executing program 1: write(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind(0xffffffffffffffff, 0x0, 0x0) 17:43:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x9c0, 0x6, 0x100, 0x2}, 0x40) 17:43:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 418.890264][T15263] loop2: detected capacity change from 0 to 87 [ 418.990832][ T26] audit: type=1804 audit(1628271801.891:250): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/275/file1/bus" dev="loop2" ino=46 res=1 errno=0 [ 419.049943][T15271] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x3, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x1c}}, 0x0) [ 419.243132][ T26] audit: type=1800 audit(1628271801.921:251): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=46 res=0 errno=0 [ 419.379878][T15263] attempt to access beyond end of device [ 419.379878][T15263] loop2: rw=0, want=90, limit=87 17:43:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, &(0x7f0000000040)={'syztnl2\x00', 0x0}) 17:43:22 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x8}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) [ 419.570047][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:43:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsmount(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 419.643237][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:43:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 17:43:22 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88442, 0x0) lsetxattr$security_capability(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140), &(0x7f0000002180)=@v3, 0x18, 0x0) 17:43:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80642, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) [ 420.052989][T15297] loop2: detected capacity change from 0 to 87 [ 420.063693][T15293] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 420.113862][ T26] audit: type=1804 audit(1628271803.011:252): pid=15297 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/276/file1/bus" dev="loop2" ino=47 res=1 errno=0 17:43:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:23 executing program 1: write(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind(0xffffffffffffffff, 0x0, 0x0) 17:43:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 420.381666][ T26] audit: type=1800 audit(1628271803.011:253): pid=15297 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=47 res=0 errno=0 17:43:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r2, r3, 0x0, 0x1) [ 420.434577][T15297] attempt to access beyond end of device [ 420.434577][T15297] loop2: rw=0, want=90, limit=87 17:43:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 17:43:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="fd498b6f20"}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x100, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x16, 0x91, "d0691e1be000c59805954eb2fc2fd5edec7f"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:23 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88442, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2, 0x14, 0x0) 17:43:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x2, 0x0) 17:43:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1, 0x124b}, 0x1c, 0x0, 0x0, &(0x7f00000010c0)=[@rthdr={{0x18}}], 0x18}}], 0x2, 0x0) [ 420.852130][T15323] loop2: detected capacity change from 0 to 87 17:43:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) [ 421.012916][T15329] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 421.363624][T15335] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 421.439114][T15323] attempt to access beyond end of device [ 421.439114][T15323] loop2: rw=0, want=90, limit=87 17:43:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2}}) 17:43:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 421.497531][T15337] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 17:43:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 17:43:24 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000007540)={0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000005f40)="e0", 0x1}, {&(0x7f0000006000)="c4", 0x1}, {&(0x7f00000060c0)="5fffec7721bdb623036d628ad751608c2213b952c3a9c17148350e0008652846ca843c0a259539a2f8af66d1328c064031d503f570d26e97b2f9c50f015d38cb4ac2936ab5b6116dfa0a157af514f68dce8fdf322fd723f084962afbc6f06cb41b85c231d626ae04004e26f531e2c42f856507afc922ae60968fd0fb98b812d3ecd6a6b88f6c", 0x86}, {&(0x7f0000006180)="09705d57a373dd0233a585440e179989e70d99ecd1dfe282e924086523c4e65790ac7cf2f3c8ed635f2fa4639cab91a356a3d792da288726effd196e9f05d55c7ac8e72fd1e45b626ed4baca94a88f52c1b99d60e4e9dae0e4558ff56f3f146fd07156dc4fd1a2077318afa8ec0461139d1b3afb3c", 0x75}, {&(0x7f0000006200)="51a9dd2e56ce6976bdcb1455a9d53dfb3a780db82ee74441dce536a8aa9457ebd7c8d0c87b2e2b82a3d21470e407099d59c3d99ade189936f33b54eff2445b93e51ce7e3ddb6a6a46f98f4059af4237e6604a93a3c8f7b6b45c2cd80d9959f669429c563020611a4c9e1d5762ad000044a2d", 0x72}, {&(0x7f0000006280)="2401a00dca2cfbf817c90f82cb0879194daec4df1766a3fcc51530e12333d64b60d7fb9b6c9557", 0x27}, {&(0x7f00000062c0)="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", 0xe6c}, {&(0x7f00000072c0)="9f", 0x1}], 0x8, &(0x7f0000007440)=[{0x10}], 0x10}, 0x0) 17:43:24 executing program 1: write(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind(0xffffffffffffffff, 0x0, 0x0) 17:43:24 executing program 4: fanotify_mark(0xffffffffffffffff, 0x61, 0x40000000, 0xffffffffffffff9c, 0x0) 17:43:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 421.749881][T15349] loop2: detected capacity change from 0 to 87 [ 421.890025][T15357] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x6, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:24 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x8}, 0x0, &(0x7f00000002c0)={0x6}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 17:43:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 422.090999][T15349] attempt to access beyond end of device [ 422.090999][T15349] loop2: rw=0, want=90, limit=87 17:43:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 17:43:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x7, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000340)={'\x00', @ifru_addrs=@xdp}) [ 422.713654][T15377] loop2: detected capacity change from 0 to 87 [ 422.888899][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 422.888917][ T26] audit: type=1804 audit(1628271805.791:258): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/279/bus" dev="sda1" ino=15084 res=1 errno=0 17:43:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x18, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) [ 422.993974][T15389] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 423.026645][ T26] audit: type=1800 audit(1628271805.791:259): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15084 res=0 errno=0 17:43:26 executing program 1: write(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) fallocate(r2, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind(0xffffffffffffffff, 0x0, 0x0) 17:43:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:26 executing program 0: syz_io_uring_setup(0x1254, &(0x7f0000000080)={0x0, 0x54d5, 0xf, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:43:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 17:43:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x2c, r1, 0x611, 0x0, 0x0, {0x6}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) 17:43:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) [ 423.306352][T15400] loop2: detected capacity change from 0 to 87 [ 423.350318][ T26] audit: type=1804 audit(1628271806.251:260): pid=15400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/280/file1/bus" dev="loop2" ino=50 res=1 errno=0 [ 423.546444][T15400] attempt to access beyond end of device [ 423.546444][T15400] loop2: rw=0, want=90, limit=87 [ 423.557509][ T26] audit: type=1800 audit(1628271806.251:261): pid=15400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=50 res=0 errno=0 17:43:26 executing program 3: r0 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 17:43:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110600800000000000000d0000001800018014000200aef5a5d26ddfae1e368e400076657468"], 0x2c}}, 0x0) [ 423.702963][T15416] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote, 0x10001}, 0x1c, 0x0}, 0x0) 17:43:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 17:43:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x2c, r1, 0x611, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xf, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) 17:43:27 executing program 4: pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x7}, 0x0, 0x0, 0x0) [ 424.357659][T15431] loop2: detected capacity change from 0 to 87 [ 424.411778][ T26] audit: type=1804 audit(1628271807.311:262): pid=15431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/281/file1/bus" dev="loop2" ino=51 res=1 errno=0 17:43:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 17:43:27 executing program 3: clock_gettime(0x0, &(0x7f00000005c0)={0x0}) pselect6(0x40, &(0x7f0000000500), &(0x7f0000000540)={0x4}, 0x0, &(0x7f0000000600)={r0}, 0x0) [ 424.632919][T15431] attempt to access beyond end of device [ 424.632919][T15431] loop2: rw=0, want=90, limit=87 [ 424.638448][ T26] audit: type=1800 audit(1628271807.341:263): pid=15431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=51 res=0 errno=0 17:43:27 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 17:43:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700000000000000, &(0x7f0000001380), 0x0, &(0x7f0000003480)) 17:43:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 17:43:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 17:43:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000040)=@raw=[@generic, @map_val, @generic, @initr0, @alu, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000100)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 424.992960][T15457] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x80}, 0x40) 17:43:28 executing program 0: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0xa, 0x10, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') [ 425.182413][T15461] loop2: detected capacity change from 0 to 87 17:43:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000001640)=[{0x0}, {&(0x7f00000001c0)="ce", 0x1}, {&(0x7f00000002c0)='s', 0x1}], 0x3}, 0x0) [ 425.279338][ T26] audit: type=1804 audit(1628271808.181:264): pid=15461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/282/file1/bus" dev="loop2" ino=52 res=1 errno=0 17:43:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 17:43:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 17:43:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="d7", 0x1}], 0x1}}], 0x1, 0x4c0d4) 17:43:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf4240, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 425.425581][ T26] audit: type=1800 audit(1628271808.181:265): pid=15461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=52 res=0 errno=0 17:43:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x7, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 425.657034][T15481] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 425.707203][T15484] loop2: detected capacity change from 0 to 87 [ 425.870188][ T26] audit: type=1804 audit(1628271808.771:266): pid=15489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/283/bus" dev="sda1" ino=15096 res=1 errno=0 17:43:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x5, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x40) 17:43:28 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 17:43:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 17:43:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 17:43:29 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x4000, 0xc3, &(0x7f0000ffa000/0x4000)=nil) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x38) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) shmctl$SHM_LOCK(r0, 0x3) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2}}]}}]}}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffff9c, 0x0) [ 426.081152][ T26] audit: type=1800 audit(1628271808.771:267): pid=15489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15096 res=0 errno=0 17:43:29 executing program 0: socket(0x11, 0x2, 0x3) syz_emit_ethernet(0x9c, &(0x7f0000000140)=ANY=[@ANYBLOB="50c5423ccbd30180c2000000810030af81"], 0x0) 17:43:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @mcast2, @private0}}) [ 426.320656][T15508] loop2: detected capacity change from 0 to 87 [ 426.340627][T15507] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 426.504542][ T7631] usb 4-1: new high-speed USB device number 6 using dummy_hcd 17:43:29 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x7}, 0x0, 0x0, 0x0) 17:43:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 17:43:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x0) [ 426.615480][ T1068] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 426.704547][ T7631] usb 4-1: device descriptor read/64, error 18 [ 426.719826][T15527] loop2: detected capacity change from 0 to 87 17:43:29 executing program 0: shmget(0x3, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) 17:43:29 executing program 1: shmget(0x3, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) [ 426.842692][T15532] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 426.855838][ T1068] usb 5-1: Invalid ep0 maxpacket: 512 [ 426.997328][ T7631] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 427.004992][ T1068] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 427.254710][ T7631] usb 4-1: device descriptor read/64, error 18 [ 427.304573][ T1068] usb 5-1: Invalid ep0 maxpacket: 512 [ 427.310279][ T1068] usb usb5-port1: attempt power cycle [ 427.387092][ T7631] usb usb4-port1: attempt power cycle [ 427.744715][ T1068] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 427.841975][ T7631] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 427.856240][ T1068] usb 5-1: Invalid ep0 maxpacket: 512 [ 427.935270][ T7631] usb 4-1: Invalid ep0 maxpacket: 0 [ 428.014654][ T1068] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 428.084795][ T7631] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 428.124648][ T1068] usb 5-1: Invalid ep0 maxpacket: 512 [ 428.131033][ T1068] usb usb5-port1: unable to enumerate USB device [ 428.205273][ T7631] usb 4-1: Invalid ep0 maxpacket: 0 [ 428.211027][ T7631] usb usb4-port1: unable to enumerate USB device 17:43:32 executing program 3: r0 = msgget(0x1, 0x0) msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x0) 17:43:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 17:43:32 executing program 0: setuid(0xee00) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 17:43:32 executing program 4: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/power_supply', 0x0, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/145, 0x91}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/139, 0x8b}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000064c0)={0x0, 0x3f00}) 17:43:32 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000200)=0x80) write$FUSE_POLL(r1, 0x0, 0x0) 17:43:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x0) [ 429.291137][T15568] loop2: detected capacity change from 0 to 87 17:43:32 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x5c}) [ 429.472012][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 429.472029][ T26] audit: type=1804 audit(1628271812.371:272): pid=15576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/286/bus" dev="sda1" ino=15114 res=1 errno=0 17:43:32 executing program 3: set_mempolicy(0x4, &(0x7f0000000280)=0x1, 0x5) [ 429.588135][T15583] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:32 executing program 1: unshare(0x8000600) unshare(0x8000280) 17:43:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 17:43:32 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) semget$private(0x0, 0x4, 0x0) r1 = semget$private(0x0, 0x0, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) [ 429.749739][ T26] audit: type=1800 audit(1628271812.371:273): pid=15576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15114 res=0 errno=0 17:43:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x0) 17:43:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) 17:43:32 executing program 3: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001480), 0x2, 0x0) 17:43:32 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001140)) [ 429.922510][T15598] loop2: detected capacity change from 0 to 87 [ 430.089182][ T26] audit: type=1804 audit(1628271812.991:274): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/287/bus" dev="sda1" ino=15112 res=1 errno=0 [ 430.122958][T15610] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:33 executing program 4: io_setup(0xc84, &(0x7f0000000000)) 17:43:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 17:43:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 430.294751][ T26] audit: type=1800 audit(1628271812.991:275): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15112 res=0 errno=0 17:43:33 executing program 3: fanotify_init(0x2, 0x0) 17:43:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec8000000000000000260000", 0x17}], 0x1}, 0x0) 17:43:33 executing program 1: syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x3c245) 17:43:33 executing program 3: unshare(0x42000000) unshare(0x40000000) [ 430.541743][T15628] loop2: detected capacity change from 0 to 87 17:43:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001280)={&(0x7f0000000040), 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="74a1c1325bfb24840ad1bf7b9ff4960583269a73f6dfa825d9dee2f15546c38f171bd87d58b9722a7725794439eb5261176bbb4f8d5c925102735d593ac9133ea3b29765b0857b668f8fa3e8da52aba986942f61601c8e21fa29a44c876eddc60050ee3a", 0x64}, {&(0x7f0000001100)="5e58e0dfd83db0344fbe2a7d084067a1c2c0e7170975529d3da74378dc81f656c94480f86906514323780dc0c87968ff30270a132e0737860ed9ed4b38be4d6275f1d55c87f181b28eddcdd105826dceda75e5b1e0cce6a694784173fff4c6a739f41976b8c7d4fce61c0b504ddffc14251f93fdd3312fd91a0acdb3a628de4667a92569", 0x84}], 0x3, &(0x7f0000001340)=[@ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0xffffffffffffff96}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast2}}}], 0x80}, 0x0) [ 430.642651][ T26] audit: type=1804 audit(1628271813.541:276): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/288/file1/bus" dev="sda1" ino=13908 res=1 errno=0 17:43:33 executing program 0: clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001fc0)={0x0, r0+60000000}) [ 430.712934][T15635] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 430.816421][ T26] audit: type=1800 audit(1628271813.541:277): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=13908 res=0 errno=0 17:43:33 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x3e7f, &(0x7f0000000040)}) 17:43:33 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 17:43:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec8000000000000000260000", 0x17}], 0x1}, 0x0) 17:43:34 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000b40), 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) [ 431.098449][T15665] loop2: detected capacity change from 0 to 87 [ 431.197769][ T26] audit: type=1804 audit(1628271814.091:278): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/289/file1/bus" dev="loop2" ino=54 res=1 errno=0 17:43:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsmount(r1, 0x0, 0xf2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 17:43:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0xab41e80d4f8c47cb}, 0x14}}, 0x0) [ 431.382282][ T26] audit: type=1800 audit(1628271814.101:279): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=54 res=0 errno=0 17:43:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec8000000000000000260000", 0x17}], 0x1}, 0x0) [ 431.458929][T15699] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:34 executing program 4: getresuid(&(0x7f0000004740), &(0x7f0000004780), 0x0) [ 431.773307][T15728] loop2: detected capacity change from 0 to 87 [ 431.862125][ T26] audit: type=1804 audit(1628271814.761:280): pid=15728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir066182057/syzkaller.PGFilv/290/file1/bus" dev="loop2" ino=55 res=1 errno=0 [ 431.863512][ T26] audit: type=1800 audit(1628271814.761:281): pid=15728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=55 res=0 errno=0 [ 432.060628][T15740] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:39 executing program 3: sched_rr_get_interval(0x0, &(0x7f00000005c0)) 17:43:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:43:39 executing program 2: syz_io_uring_setup(0x484a, &(0x7f0000000880), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001480), 0x2, 0x0) 17:43:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a", 0x23}], 0x1}, 0x0) 17:43:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={&(0x7f0000000080), 0xc, &(0x7f0000001200)={&(0x7f00000000c0)=@getsa={0x74, 0x12, 0x1, 0x0, 0x0, {@in=@loopback, 0x0, 0x0, 0xff}, [@algo_aead={0x4c, 0x12, {{'rfc4106(essiv(seqiv(seqiv(morus1280)),sha3-512-generic))\x00'}}}]}, 0x74}}, 0x0) 17:43:39 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x3e7f, &(0x7f0000000040)}) [ 437.307422][T15777] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:40 executing program 4: r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000440)='logon\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0) 17:43:40 executing program 0: add_key$keyring(&(0x7f00000017c0), &(0x7f0000001800)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 17:43:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0xfed0) 17:43:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x2, 0x0) 17:43:40 executing program 3: set_mempolicy(0x4001, &(0x7f0000000080)=0x7, 0xd0b) 17:43:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_drop_memb(r0, 0x10e, 0x3, 0x0, 0x0) 17:43:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a", 0x23}], 0x1}, 0x0) 17:43:40 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) 17:43:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@getsa={0x28, 0x12, 0x0, 0x0, 0x0, {@in=@loopback}}, 0x28}, 0x7}, 0x0) 17:43:40 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00') 17:43:40 executing program 2: unshare(0x8000600) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 17:43:41 executing program 1: io_setup(0x1000, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x10000, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1]}, 0x8}) [ 438.114307][T15804] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:41 executing program 4: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008ac0)) 17:43:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 17:43:41 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000340)=@buf={0x28, &(0x7f00000003c0)="2b04a6f049a31c7d92f253e54e37f530ecb39b3a1cd5113ba2d7ad95ca8acf78f0a9b40730de00c2"}) 17:43:41 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) getgroups(0x7, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x10121) semget$private(0x0, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)) getegid() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/109, 0x6d}, {&(0x7f0000001bc0)=""/6, 0x6}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001c40)=""/85, 0x55}], 0x4, &(0x7f0000001d40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000002f40)=[{0x0}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/200, 0xc8}], 0x3}}, {{&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000003400)=[{&(0x7f0000003000)=""/243, 0xf3}, {&(0x7f0000003100)=""/7, 0x7}, {&(0x7f0000003140)=""/14, 0xe}, {&(0x7f0000003180)=""/114, 0x72}, {&(0x7f0000003200)=""/195, 0xc3}, {&(0x7f0000003300)=""/74, 0x4a}, {&(0x7f0000003380)=""/86, 0x56}], 0x7, &(0x7f0000003480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003840)=[{0x0}, {&(0x7f0000003600)=""/173, 0xad}, {&(0x7f00000036c0)=""/184, 0xb8}, {&(0x7f0000003780)=""/35, 0x23}, {&(0x7f00000037c0)=""/74, 0x4a}], 0x5, &(0x7f00000038c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004080)=""/12, 0xc}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/245, 0xf5}], 0x3, &(0x7f0000005300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f00000054c0)=""/52, 0x34}, {0x0}, {&(0x7f00000055c0)=""/27, 0x1b}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/126, 0x7e}], 0x5, &(0x7f0000006700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x7, 0x2000, &(0x7f0000006940)={0x77359400}) r3 = gettid() syz_open_procfs$namespace(r3, 0x0) sendmsg$unix(r1, 0x0, 0xc000) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) semget$private(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 17:43:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a", 0x23}], 0x1}, 0x0) 17:43:41 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 17:43:41 executing program 3: socket(0x26, 0x5, 0x7) 17:43:41 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000006a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 17:43:41 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0xff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) 17:43:41 executing program 0: openat$ptp0(0xffffffffffffff9c, &(0x7f0000006880), 0x0, 0x0) 17:43:41 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0xfed0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) [ 438.902615][T15837] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@getsa={0x28, 0x26, 0x1, 0x0, 0x0, {@in=@loopback}}, 0x28}}, 0x0) 17:43:42 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004d80)={0x14, 0x15, 0x1}, 0x14}}, 0x0) 17:43:42 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000006a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000008ac0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_hash}]}}) 17:43:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6", 0x29}], 0x1}, 0x0) [ 439.373294][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 439.430681][T15852] ================================================================================ [ 439.493088][T15852] UBSAN: shift-out-of-bounds in net/xfrm/xfrm_user.c:1969:18 [ 439.550021][T15852] shift exponent 127 is too large for 32-bit type 'int' [ 439.597055][T15852] CPU: 0 PID: 15852 Comm: syz-executor.1 Not tainted 5.14.0-rc3-next-20210730-syzkaller #0 [ 439.607065][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.617138][T15852] Call Trace: [ 439.620424][T15852] dump_stack_lvl+0xcd/0x134 [ 439.625114][T15852] ubsan_epilogue+0xb/0x5a [ 439.629546][T15852] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 439.636336][T15852] ? audit_update_watch+0x4b1/0x1280 [ 439.641687][T15852] ? security_capable+0x8f/0xc0 [ 439.646597][T15852] xfrm_set_default.cold+0x21/0x102 [ 439.651857][T15852] ? xfrm_netlink_rcv+0x90/0x90 [ 439.656766][T15852] xfrm_user_rcv_msg+0x430/0xa20 [ 439.661727][T15852] ? xfrm_do_migrate+0x7f0/0x7f0 [ 439.666683][T15852] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 439.672726][T15852] ? find_held_lock+0x2d/0x110 [ 439.677543][T15852] ? __mutex_lock+0x21c/0x1300 [ 439.680698][T15859] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 439.682371][T15852] netlink_rcv_skb+0x153/0x420 [ 439.682492][T15852] ? xfrm_do_migrate+0x7f0/0x7f0 [ 439.682522][T15852] ? netlink_ack+0xa60/0xa60 [ 439.682567][T15852] xfrm_netlink_rcv+0x6b/0x90 [ 439.709564][T15852] netlink_unicast+0x533/0x7d0 [ 439.714352][T15852] ? netlink_attachskb+0x890/0x890 [ 439.719479][T15852] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 439.725737][T15852] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 439.731990][T15852] ? __phys_addr_symbol+0x2c/0x70 [ 439.737055][T15852] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 439.742790][T15852] ? __check_object_size+0x16e/0x3f0 [ 439.748149][T15852] netlink_sendmsg+0x86d/0xdb0 [ 439.752943][T15852] ? netlink_unicast+0x7d0/0x7d0 [ 439.757907][T15852] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 439.764165][T15852] ? netlink_unicast+0x7d0/0x7d0 [ 439.769124][T15852] sock_sendmsg+0xcf/0x120 [ 439.773612][T15852] ____sys_sendmsg+0x6e8/0x810 [ 439.778390][T15852] ? kernel_sendmsg+0x50/0x50 [ 439.783073][T15852] ? do_recvmmsg+0x6d0/0x6d0 [ 439.787677][T15852] ? lock_chain_count+0x20/0x20 17:43:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6", 0x29}], 0x1}, 0x0) [ 439.792542][T15852] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 439.798544][T15852] ___sys_sendmsg+0xf3/0x170 [ 439.803152][T15852] ? sendmsg_copy_msghdr+0x160/0x160 [ 439.808456][T15852] ? __fget_files+0x21b/0x3e0 [ 439.813204][T15852] ? lock_downgrade+0x6e0/0x6e0 [ 439.818083][T15852] ? __fget_files+0x23d/0x3e0 [ 439.822787][T15852] ? __fget_light+0xea/0x280 [ 439.827395][T15852] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 439.833654][T15852] __sys_sendmsg+0xe5/0x1b0 [ 439.838171][T15852] ? __sys_sendmsg_sock+0x30/0x30 [ 439.843227][T15852] ? syscall_enter_from_user_mode+0x21/0x70 [ 439.849199][T15852] do_syscall_64+0x35/0xb0 [ 439.853628][T15852] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 439.859540][T15852] RIP: 0033:0x4665e9 [ 439.863442][T15852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 439.883057][T15852] RSP: 002b:00007f8268dd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.891482][T15852] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 439.899456][T15852] RDX: 0000000000000000 RSI: 0000000020001240 RDI: 0000000000000003 [ 439.907432][T15852] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 439.915406][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 439.923392][T15852] R13: 00007ffe88e873bf R14: 00007f8268dd7300 R15: 0000000000022000 [ 439.927554][T15861] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:42 executing program 0: syz_emit_ethernet(0x14, &(0x7f0000000380)={@remote, @empty, @val={@void}, {@generic={0x6005, "184e"}}}, 0x0) [ 439.998931][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.005298][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 17:43:43 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f000000a300)={0x0, 0x0, &(0x7f000000a180)=[{0x0}, {0x0}], 0x2}, 0x0) 17:43:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:43:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='}(#@\xe2\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6", 0x29}], 0x1}, 0x0) 17:43:43 executing program 3: syz_open_dev$vcsu(&(0x7f0000000240), 0xffffffffffffff19, 0x0) 17:43:43 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "ecb7359afa99b656879f353ac91b7aa47f1f76e61d9b5d6372a79c3bb419f1604ced109a6808bcc5ba038aae437ac7033b20b4faa85e02b6dfc71693f7fda416"}, 0x48, 0xfffffffffffffffb) [ 440.346514][T15876] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 17:43:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000013c0)={&(0x7f0000001180), 0xb, &(0x7f0000001380)={&(0x7f0000001200)={0x14}, 0x14}}, 0x0) [ 440.689288][T15852] ================================================================================ [ 440.709082][T15852] Kernel panic - not syncing: panic_on_warn set ... [ 440.715693][T15852] CPU: 0 PID: 15852 Comm: syz-executor.1 Not tainted 5.14.0-rc3-next-20210730-syzkaller #0 [ 440.725943][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.736010][T15852] Call Trace: [ 440.739293][T15852] dump_stack_lvl+0xcd/0x134 [ 440.743908][T15852] panic+0x2b0/0x6dd [ 440.747854][T15852] ? __warn_printk+0xf3/0xf3 [ 440.752500][T15852] ? dump_stack_lvl+0x120/0x134 [ 440.757467][T15852] ? ubsan_epilogue+0x3e/0x5a [ 440.762165][T15852] ubsan_epilogue+0x54/0x5a [ 440.766700][T15852] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 440.773480][T15852] ? audit_update_watch+0x4b1/0x1280 [ 440.778778][T15852] ? security_capable+0x8f/0xc0 [ 440.783651][T15852] xfrm_set_default.cold+0x21/0x102 [ 440.788875][T15852] ? xfrm_netlink_rcv+0x90/0x90 [ 440.793742][T15852] xfrm_user_rcv_msg+0x430/0xa20 [ 440.798702][T15852] ? xfrm_do_migrate+0x7f0/0x7f0 [ 440.803653][T15852] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 440.809646][T15852] ? find_held_lock+0x2d/0x110 [ 440.814460][T15852] ? __mutex_lock+0x21c/0x1300 [ 440.819247][T15852] netlink_rcv_skb+0x153/0x420 [ 440.824032][T15852] ? xfrm_do_migrate+0x7f0/0x7f0 [ 440.828983][T15852] ? netlink_ack+0xa60/0xa60 [ 440.833608][T15852] xfrm_netlink_rcv+0x6b/0x90 [ 440.838297][T15852] netlink_unicast+0x533/0x7d0 [ 440.843084][T15852] ? netlink_attachskb+0x890/0x890 [ 440.848211][T15852] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 440.854468][T15852] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 440.860723][T15852] ? __phys_addr_symbol+0x2c/0x70 [ 440.865756][T15852] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 440.871488][T15852] ? __check_object_size+0x16e/0x3f0 [ 440.876795][T15852] netlink_sendmsg+0x86d/0xdb0 [ 440.881589][T15852] ? netlink_unicast+0x7d0/0x7d0 [ 440.886560][T15852] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 440.892912][T15852] ? netlink_unicast+0x7d0/0x7d0 [ 440.897875][T15852] sock_sendmsg+0xcf/0x120 [ 440.902311][T15852] ____sys_sendmsg+0x6e8/0x810 [ 440.907093][T15852] ? kernel_sendmsg+0x50/0x50 [ 440.911782][T15852] ? do_recvmmsg+0x6d0/0x6d0 [ 440.916392][T15852] ? lock_chain_count+0x20/0x20 [ 440.921261][T15852] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 440.927265][T15852] ___sys_sendmsg+0xf3/0x170 [ 440.931874][T15852] ? sendmsg_copy_msghdr+0x160/0x160 [ 440.937185][T15852] ? __fget_files+0x21b/0x3e0 [ 440.941882][T15852] ? lock_downgrade+0x6e0/0x6e0 [ 440.946764][T15852] ? __fget_files+0x23d/0x3e0 [ 440.951468][T15852] ? __fget_light+0xea/0x280 [ 440.956077][T15852] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 440.962341][T15852] __sys_sendmsg+0xe5/0x1b0 [ 440.966861][T15852] ? __sys_sendmsg_sock+0x30/0x30 [ 440.971914][T15852] ? syscall_enter_from_user_mode+0x21/0x70 [ 440.977831][T15852] do_syscall_64+0x35/0xb0 [ 440.982261][T15852] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 440.988172][T15852] RIP: 0033:0x4665e9 [ 440.992074][T15852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 441.011689][T15852] RSP: 002b:00007f8268dd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.020117][T15852] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 441.028093][T15852] RDX: 0000000000000000 RSI: 0000000020001240 RDI: 0000000000000003 [ 441.036072][T15852] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 441.044051][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 441.052030][T15852] R13: 00007ffe88e873bf R14: 00007f8268dd7300 R15: 0000000000022000 [ 441.061282][T15852] Kernel Offset: disabled [ 441.065761][T15852] Rebooting in 86400 seconds..