002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:40 executing program 1: 13:06:41 executing program 1: 13:06:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:41 executing program 3: 13:06:41 executing program 1: 13:06:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:43 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:06:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:43 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:43 executing program 3: 13:06:43 executing program 1: 13:06:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 13:06:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:43 executing program 3: 13:06:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:44 executing program 1: 13:06:46 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:06:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 13:06:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:46 executing program 3: 13:06:46 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:46 executing program 1: 13:06:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 13:06:47 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:47 executing program 3: 13:06:47 executing program 1: 13:06:47 executing program 1: 13:06:47 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:50 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:06:50 executing program 3: 13:06:50 executing program 1: 13:06:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:50 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:50 executing program 3: 13:06:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:50 executing program 1: 13:06:50 executing program 1: 13:06:50 executing program 3: 13:06:50 executing program 1: 13:06:53 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:06:53 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:53 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:53 executing program 3: 13:06:53 executing program 1: 13:06:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:53 executing program 3: 13:06:53 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 392.190321][T10036] ptrace attach of "/root/syz-executor.2"[10035] was attempted by "/root/syz-executor.2"[10036] 13:06:53 executing program 1: 13:06:53 executing program 3: 13:06:53 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:53 executing program 1: [ 392.291568][T10046] ptrace attach of "/root/syz-executor.2"[10045] was attempted by "/root/syz-executor.2"[10046] [ 392.388725][T10054] ptrace attach of "/root/syz-executor.2"[10052] was attempted by "/root/syz-executor.2"[10054] 13:06:56 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:06:56 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:56 executing program 1: 13:06:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:56 executing program 3: 13:06:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:56 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:06:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x320000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080), 0x4) r1 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100), 0x0) 13:06:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:56 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:06:56 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:59 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:06:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x320000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080), 0x4) r1 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100), 0x0) 13:06:59 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:06:59 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:59 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:59 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:06:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:59 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:06:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:06:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x60}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @remote}, {0x0, 0x0, 0xfdd1}}}}, 0xfdef) [ 398.675265][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.683826][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.736001][T10148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.811869][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.866256][T10148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:07:02 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:02 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x60}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x88, 0x0, @remote, @remote}, {0x0, 0x0, 0xfdd1}}}}, 0xfdef) 13:07:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:02 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 401.512030][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:07:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 401.585901][T10176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:07:02 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:02 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:02 executing program 3: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x0) 13:07:02 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:05 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:05 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:05 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x5e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x1c}, @multicast1}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "94bee41ffe7661a779b32d81fbf4b541a5349f1b08874ca8", "5b1a8b731b07c8bf12967dc9ba3966469abc7ef66558cc48f8ffffffffffffff"}}}}}}, 0x0) 13:07:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 404.555315][T10217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:07:05 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:05 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:05 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7}, 0x7) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 13:07:05 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:05 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:05 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:05 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:06 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:08 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:08 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:08 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)='2', 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000200)) r5 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x480, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 13:07:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:08 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) r3 = syz_open_pts(r0, 0x0) r4 = dup2(r3, r0) ioctl$TCXONC(r4, 0x540a, 0x3) 13:07:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, r3, 0x821}, 0x14}}, 0x0) 13:07:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:09 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:09 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='systemem0md5sum$\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000030040002802000000000000b8000000b8000000b8000000000000009001000090010000900100009001000090010000030000000000000000000000e0000001000000000000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100ffffffffffff7000b8000000000000000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000001000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d800000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028"], 0x1) mmap(&(0x7f0000757000/0x4000)=nil, 0x4000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x400c810) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 13:07:11 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:11 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 410.696278][T10329] attempt to access beyond end of device [ 410.721329][T10329] loop3: rw=2049, want=78, limit=63 [ 410.735556][T10329] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 410.765416][T10329] attempt to access beyond end of device [ 410.771699][T10329] loop3: rw=2049, want=79, limit=63 [ 410.795538][T10329] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 410.804100][T10329] attempt to access beyond end of device 13:07:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:11 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:11 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) [ 410.825952][T10329] loop3: rw=2049, want=80, limit=63 [ 410.831188][T10329] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 410.850664][T10329] attempt to access beyond end of device 13:07:11 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) [ 410.896672][T10329] loop3: rw=2049, want=81, limit=63 [ 410.910767][T10329] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 410.933484][T10338] attempt to access beyond end of device [ 410.940844][T10338] loop3: rw=2049, want=78, limit=63 13:07:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) [ 410.954264][T10338] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 410.975524][T10338] attempt to access beyond end of device [ 410.994974][T10338] loop3: rw=2049, want=79, limit=63 [ 411.014147][T10338] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 411.047463][T10329] attempt to access beyond end of device [ 411.054346][T10329] loop3: rw=2049, want=150, limit=63 13:07:12 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) [ 411.072184][T10338] attempt to access beyond end of device [ 411.085082][T10338] loop3: rw=2049, want=147, limit=63 13:07:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 411.404632][T10366] attempt to access beyond end of device [ 411.411481][T10366] loop3: rw=2049, want=78, limit=63 [ 411.470926][T10366] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 411.500679][T10366] attempt to access beyond end of device [ 411.509647][T10366] loop3: rw=2049, want=79, limit=63 [ 411.515317][T10366] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 411.530125][T10366] attempt to access beyond end of device [ 411.536012][T10366] loop3: rw=2049, want=80, limit=63 [ 411.541391][T10366] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 411.552890][T10366] attempt to access beyond end of device [ 411.561114][T10366] loop3: rw=2049, want=81, limit=63 [ 411.569927][T10366] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 411.578854][T10366] attempt to access beyond end of device [ 411.584676][T10366] loop3: rw=2049, want=130, limit=63 [ 411.593398][T10372] attempt to access beyond end of device [ 411.600711][T10372] loop3: rw=2049, want=78, limit=63 [ 411.608578][T10372] attempt to access beyond end of device [ 411.626292][T10372] loop3: rw=2049, want=79, limit=63 13:07:14 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:14 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:07:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:14 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) [ 414.092377][T10398] attempt to access beyond end of device [ 414.098589][T10398] loop3: rw=2049, want=78, limit=63 [ 414.104153][T10398] attempt to access beyond end of device [ 414.110911][T10398] loop3: rw=2049, want=79, limit=63 [ 414.116752][T10398] attempt to access beyond end of device [ 414.122554][T10398] loop3: rw=2049, want=80, limit=63 [ 414.128614][T10398] attempt to access beyond end of device [ 414.134395][T10398] loop3: rw=2049, want=81, limit=63 [ 414.140767][T10398] attempt to access beyond end of device [ 414.147507][T10398] loop3: rw=2049, want=130, limit=63 [ 414.171310][T10398] attempt to access beyond end of device [ 414.177120][T10398] loop3: rw=2049, want=78, limit=63 [ 414.182333][T10398] attempt to access beyond end of device 13:07:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:07:15 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 414.188058][T10398] loop3: rw=2049, want=79, limit=63 13:07:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) [ 414.370102][T10415] attempt to access beyond end of device [ 414.375980][T10415] loop3: rw=2049, want=78, limit=63 [ 414.381283][T10415] attempt to access beyond end of device [ 414.387305][T10415] loop3: rw=2049, want=79, limit=63 [ 414.392644][T10415] attempt to access beyond end of device [ 414.398610][T10415] loop3: rw=2049, want=80, limit=63 [ 414.403939][T10415] attempt to access beyond end of device [ 414.409916][T10415] loop3: rw=2049, want=81, limit=63 [ 414.415320][T10415] attempt to access beyond end of device [ 414.421203][T10415] loop3: rw=2049, want=130, limit=63 [ 414.475833][T10415] attempt to access beyond end of device [ 414.481695][T10415] loop3: rw=2049, want=78, limit=63 [ 414.488138][T10415] attempt to access beyond end of device [ 414.505339][T10415] loop3: rw=2049, want=79, limit=63 13:07:17 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:17 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 13:07:18 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) [ 417.167528][T10448] attempt to access beyond end of device [ 417.173449][T10448] loop3: rw=2049, want=78, limit=63 [ 417.198886][T10448] buffer_io_error: 14 callbacks suppressed [ 417.198899][T10448] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:07:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000006000/0x2000)=nil) [ 417.245254][T10448] attempt to access beyond end of device [ 417.250927][T10448] loop3: rw=2049, want=79, limit=63 [ 417.280646][T10448] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:07:18 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 417.323875][T10448] attempt to access beyond end of device [ 417.339639][T10448] loop3: rw=2049, want=80, limit=63 [ 417.350549][T10448] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 417.375519][T10448] attempt to access beyond end of device [ 417.394665][T10448] loop3: rw=2049, want=81, limit=63 [ 417.408183][T10448] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 417.427327][T10448] attempt to access beyond end of device [ 417.433157][T10448] loop3: rw=2049, want=130, limit=63 [ 417.440513][T10459] attempt to access beyond end of device [ 417.446779][T10459] loop3: rw=2049, want=78, limit=63 [ 417.452003][T10459] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 417.461300][T10459] attempt to access beyond end of device [ 417.467665][T10459] loop3: rw=2049, want=79, limit=63 [ 417.472938][T10459] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:07:20 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000006000/0x2000)=nil) 13:07:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 419.829439][T10482] attempt to access beyond end of device [ 419.835315][T10482] loop3: rw=2049, want=78, limit=63 [ 419.840619][T10482] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 419.850096][T10482] attempt to access beyond end of device [ 419.856241][T10482] loop3: rw=2049, want=79, limit=63 [ 419.861583][T10482] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 419.870675][T10482] attempt to access beyond end of device [ 419.877104][T10482] loop3: rw=2049, want=80, limit=63 [ 419.882466][T10482] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 419.892463][T10482] attempt to access beyond end of device [ 419.898693][T10482] loop3: rw=2049, want=81, limit=63 [ 419.904018][T10482] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 419.913502][T10482] attempt to access beyond end of device [ 419.919617][T10482] loop3: rw=2049, want=130, limit=63 [ 419.927888][T10487] attempt to access beyond end of device [ 419.948315][T10487] loop3: rw=2049, want=78, limit=63 [ 419.975123][T10487] attempt to access beyond end of device [ 419.980958][T10487] loop3: rw=2049, want=79, limit=63 13:07:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:21 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000006000/0x2000)=nil) 13:07:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 420.281519][T10498] attempt to access beyond end of device [ 420.317546][T10498] loop3: rw=2049, want=78, limit=63 [ 420.322888][T10498] attempt to access beyond end of device 13:07:21 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000024000b0efe0800002200000000000000", @ANYRES32=r1, @ANYBLOB="07e9fffffeffffff000000000b000100636c736163740000bcdc7c9d4e9b0f208dda8d70083e97f67db7c84acb8db65f5bd8b598c7c893eaedb6c1dacf2f0ca6d1debb520b602ebf5df45c547fe01a2860012c5b3f36ce68f0c273433edc1a853850e1cdf97b2cedac921f3e3f409f2b123f9bbe469e0b4b1e38b7f66f229462ec8d4da8ffc5e4f1b7fe13cdc8eaaab6c4ea2c60e4c8be5b019ea4c0250deac30f6f73ba"], 0x30}}, 0x0) [ 420.329048][T10498] loop3: rw=2049, want=79, limit=63 [ 420.335484][T10498] attempt to access beyond end of device [ 420.342412][T10498] loop3: rw=2049, want=80, limit=63 [ 420.360794][T10498] attempt to access beyond end of device 13:07:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 420.385118][T10498] loop3: rw=2049, want=81, limit=63 13:07:21 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 420.415431][T10498] attempt to access beyond end of device [ 420.453388][T10498] loop3: rw=2049, want=130, limit=63 [ 420.472107][T10507] attempt to access beyond end of device [ 420.480053][T10507] loop3: rw=2049, want=78, limit=63 [ 420.495328][T10507] attempt to access beyond end of device [ 420.505792][T10507] loop3: rw=2049, want=79, limit=63 13:07:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:23 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x442140, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x14280000003075) 13:07:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:23 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 422.874130][T10537] attempt to access beyond end of device [ 422.892942][T10537] loop3: rw=2049, want=78, limit=63 [ 422.911606][T10537] buffer_io_error: 8 callbacks suppressed [ 422.911619][T10537] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 422.948658][T10537] attempt to access beyond end of device [ 422.960309][T10537] loop3: rw=2049, want=79, limit=63 [ 422.967900][T10537] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 422.976498][T10537] attempt to access beyond end of device [ 422.982453][T10537] loop3: rw=2049, want=80, limit=63 [ 422.990294][T10537] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 423.000880][T10537] attempt to access beyond end of device [ 423.028881][T10537] loop3: rw=2049, want=81, limit=63 [ 423.040799][T10537] Buffer I/O error on dev loop3, logical block 80, lost async page write 13:07:24 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 423.057855][T10548] attempt to access beyond end of device [ 423.063553][T10548] loop3: rw=2049, want=78, limit=63 [ 423.069685][T10548] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 423.079346][T10548] attempt to access beyond end of device [ 423.105009][T10548] loop3: rw=2049, want=79, limit=63 [ 423.110383][T10548] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:07:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:24 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 423.337382][T10559] attempt to access beyond end of device [ 423.343266][T10559] loop3: rw=2049, want=78, limit=63 [ 423.370826][T10559] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 423.395617][T10559] attempt to access beyond end of device [ 423.401360][T10559] loop3: rw=2049, want=79, limit=63 [ 423.415069][T10559] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 423.423987][T10559] attempt to access beyond end of device [ 423.429971][T10559] loop3: rw=2049, want=80, limit=63 [ 423.435496][T10559] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 423.444266][T10559] attempt to access beyond end of device [ 423.450257][T10559] loop3: rw=2049, want=81, limit=63 [ 423.455888][T10559] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 423.464591][T10559] attempt to access beyond end of device [ 423.470646][T10559] loop3: rw=2049, want=130, limit=63 [ 423.476906][T10567] attempt to access beyond end of device [ 423.488572][T10567] loop3: rw=2049, want=78, limit=63 13:07:24 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 423.509963][T10567] attempt to access beyond end of device [ 423.516046][T10567] loop3: rw=2049, want=79, limit=63 13:07:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') ioctl$NS_GET_PARENT(r2, 0xb701, 0x0) [ 423.734681][T10576] attempt to access beyond end of device [ 423.741952][T10576] loop3: rw=2049, want=78, limit=63 [ 423.747586][T10576] attempt to access beyond end of device [ 423.753477][T10576] loop3: rw=2049, want=79, limit=63 [ 423.758983][T10576] attempt to access beyond end of device [ 423.764788][T10576] loop3: rw=2049, want=80, limit=63 [ 423.770364][T10576] attempt to access beyond end of device [ 423.776232][T10576] loop3: rw=2049, want=81, limit=63 [ 423.782039][T10576] attempt to access beyond end of device [ 423.788062][T10576] loop3: rw=2049, want=130, limit=63 [ 423.835994][T10576] attempt to access beyond end of device [ 423.841733][T10576] loop3: rw=2049, want=78, limit=63 [ 423.875016][T10576] attempt to access beyond end of device [ 423.880704][T10576] loop3: rw=2049, want=79, limit=63 13:07:26 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:26 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:26 executing program 1: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_uring_setup(0xe78, &(0x7f00000001c0)={0x0, 0x0, 0x4}) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000007, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') 13:07:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="f0", 0xffff0000}], 0x1, 0xffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 425.992926][T10601] attempt to access beyond end of device [ 426.008505][T10601] loop3: rw=2049, want=78, limit=63 [ 426.022316][T10601] attempt to access beyond end of device [ 426.028666][T10601] loop3: rw=2049, want=79, limit=63 [ 426.033916][T10601] attempt to access beyond end of device [ 426.041459][T10601] loop3: rw=2049, want=80, limit=63 [ 426.047488][T10601] attempt to access beyond end of device [ 426.053183][T10601] loop3: rw=2049, want=81, limit=63 [ 426.058868][T10601] attempt to access beyond end of device [ 426.064554][T10601] loop3: rw=2049, want=130, limit=63 [ 426.072410][T10601] attempt to access beyond end of device [ 426.078570][T10601] loop3: rw=2049, want=78, limit=63 [ 426.087295][T10601] attempt to access beyond end of device 13:07:27 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 426.122013][T10601] loop3: rw=2049, want=79, limit=63 13:07:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:07:27 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 426.400949][T10624] attempt to access beyond end of device [ 426.414116][T10624] loop3: rw=2049, want=78, limit=63 [ 426.435229][T10624] attempt to access beyond end of device [ 426.462870][T10624] loop3: rw=2049, want=79, limit=63 [ 426.504841][T10624] attempt to access beyond end of device [ 426.510521][T10624] loop3: rw=2049, want=80, limit=63 [ 426.525728][T10624] attempt to access beyond end of device [ 426.531487][T10624] loop3: rw=2049, want=81, limit=63 [ 426.545009][T10624] attempt to access beyond end of device [ 426.564850][T10624] loop3: rw=2049, want=130, limit=63 [ 426.587683][T10632] attempt to access beyond end of device [ 426.593355][T10632] loop3: rw=2049, want=78, limit=63 13:07:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:27 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 426.654443][T10632] attempt to access beyond end of device [ 426.661677][T10632] loop3: rw=2049, want=79, limit=63 13:07:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:27 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 426.953122][T10647] attempt to access beyond end of device [ 427.010208][T10647] loop3: rw=2049, want=78, limit=63 [ 427.046767][T10647] attempt to access beyond end of device [ 427.087008][T10647] loop3: rw=2049, want=79, limit=63 [ 427.132571][T10647] attempt to access beyond end of device [ 427.184890][T10647] loop3: rw=2049, want=80, limit=63 [ 427.190361][T10647] attempt to access beyond end of device [ 427.196519][T10647] loop3: rw=2049, want=81, limit=63 [ 427.202050][T10647] attempt to access beyond end of device [ 427.208220][T10647] loop3: rw=2049, want=130, limit=63 [ 427.214461][T10657] attempt to access beyond end of device [ 427.230603][T10657] loop3: rw=2049, want=78, limit=63 [ 427.236483][T10657] attempt to access beyond end of device [ 427.243550][T10657] loop3: rw=2049, want=79, limit=63 13:07:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:29 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:29 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) 13:07:30 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 429.054261][T10669] attempt to access beyond end of device [ 429.067199][T10669] loop3: rw=2049, want=78, limit=63 [ 429.085660][T10669] buffer_io_error: 26 callbacks suppressed [ 429.085673][T10669] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 429.103095][ T26] audit: type=1804 audit(1587301650.081:4): pid=10676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/156/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 429.124466][T10669] attempt to access beyond end of device 13:07:30 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 429.153773][T10669] loop3: rw=2049, want=79, limit=63 [ 429.170635][T10669] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:07:30 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 429.195899][T10669] attempt to access beyond end of device [ 429.213255][T10669] loop3: rw=2049, want=80, limit=63 [ 429.227607][T10669] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 429.275664][T10669] attempt to access beyond end of device [ 429.315635][T10669] loop3: rw=2049, want=81, limit=63 [ 429.321236][T10669] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 429.345842][T10682] attempt to access beyond end of device [ 429.357428][T10682] loop3: rw=2049, want=78, limit=63 [ 429.364156][T10682] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 429.375774][T10682] attempt to access beyond end of device [ 429.400163][T10682] loop3: rw=2049, want=79, limit=63 [ 429.412587][T10682] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:07:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:30 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:30 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:30 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:30 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff"], 0x1) [ 429.970516][T10714] attempt to access beyond end of device [ 429.983903][T10714] loop3: rw=2049, want=78, limit=63 [ 429.997921][T10714] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 430.026166][ T26] audit: type=1804 audit(1587301651.001:5): pid=10703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/157/cgroup.controllers" dev="sda1" ino=16369 res=1 [ 430.044683][T10714] attempt to access beyond end of device [ 430.068163][T10714] loop3: rw=2049, want=79, limit=63 [ 430.079206][T10714] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 430.108649][T10714] attempt to access beyond end of device [ 430.117673][T10714] loop3: rw=2049, want=80, limit=63 [ 430.132928][T10714] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 430.158613][T10714] attempt to access beyond end of device [ 430.166375][T10714] loop3: rw=2049, want=81, limit=63 [ 430.172646][T10714] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 430.190807][T10726] attempt to access beyond end of device [ 430.199318][T10726] loop3: rw=2049, want=78, limit=63 [ 430.209962][T10726] attempt to access beyond end of device [ 430.217958][T10726] loop3: rw=2049, want=79, limit=63 13:07:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 430.448256][T10736] attempt to access beyond end of device [ 430.463703][T10736] loop3: rw=2049, want=78, limit=63 [ 430.469048][T10736] attempt to access beyond end of device [ 430.474851][T10736] loop3: rw=2049, want=79, limit=63 [ 430.480120][T10736] attempt to access beyond end of device [ 430.485842][T10736] loop3: rw=2049, want=80, limit=63 [ 430.491187][T10736] attempt to access beyond end of device 13:07:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 430.497188][T10736] loop3: rw=2049, want=81, limit=63 [ 430.502495][T10736] attempt to access beyond end of device [ 430.508275][T10736] loop3: rw=2049, want=130, limit=63 [ 430.516672][T10736] attempt to access beyond end of device [ 430.522576][T10736] loop3: rw=2049, want=78, limit=63 [ 430.527886][T10736] attempt to access beyond end of device [ 430.533603][T10736] loop3: rw=2049, want=79, limit=63 13:07:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 430.657443][T10743] attempt to access beyond end of device [ 430.663287][T10743] loop3: rw=2049, want=78, limit=63 [ 430.672646][T10743] attempt to access beyond end of device [ 430.678429][T10743] loop3: rw=2049, want=79, limit=63 [ 430.858317][ T26] audit: type=1804 audit(1587301651.831:6): pid=10747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/158/cgroup.controllers" dev="sda1" ino=15809 res=1 [ 430.953873][T10752] attempt to access beyond end of device [ 430.980686][T10752] loop3: rw=2049, want=78, limit=63 [ 430.986079][T10752] attempt to access beyond end of device [ 430.991787][T10752] loop3: rw=2049, want=79, limit=63 13:07:33 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 13:07:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 432.858631][T10766] attempt to access beyond end of device [ 432.869934][T10766] loop3: rw=2049, want=78, limit=63 [ 432.884611][T10766] attempt to access beyond end of device [ 432.893358][T10766] loop3: rw=2049, want=79, limit=63 13:07:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:07:34 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 433.249685][ T26] audit: type=1804 audit(1587301654.221:7): pid=10779 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/159/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 433.285385][ T2699] attempt to access beyond end of device [ 433.291089][ T2699] loop3: rw=1, want=78, limit=63 13:07:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 433.556222][ T2521] attempt to access beyond end of device [ 433.563761][ T2521] loop3: rw=1, want=78, limit=63 13:07:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x100000001) 13:07:34 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 13:07:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 433.862112][ T26] audit: type=1804 audit(1587301654.831:8): pid=10806 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/160/cgroup.controllers" dev="sda1" ino=16383 res=1 [ 434.012834][T10814] attempt to access beyond end of device [ 434.037006][T10814] loop3: rw=2049, want=78, limit=63 [ 434.073190][T10814] attempt to access beyond end of device [ 434.103339][T10814] loop3: rw=2049, want=79, limit=63 [ 434.119764][T10814] buffer_io_error: 17 callbacks suppressed [ 434.119782][T10814] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 434.163653][T10814] attempt to access beyond end of device [ 434.183812][T10814] loop3: rw=2049, want=80, limit=63 [ 434.200195][T10814] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 434.219028][T10814] attempt to access beyond end of device [ 434.225311][T10814] loop3: rw=2049, want=81, limit=63 [ 434.230791][T10814] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 434.240396][T10814] attempt to access beyond end of device [ 434.246771][T10814] loop3: rw=2049, want=130, limit=63 [ 434.252929][T10818] attempt to access beyond end of device [ 434.259483][T10818] loop3: rw=2049, want=78, limit=63 [ 434.278762][T10818] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 434.290246][T10818] attempt to access beyond end of device [ 434.297538][T10818] loop3: rw=2049, want=79, limit=63 [ 434.302914][T10818] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:07:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x100000001) 13:07:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 435.873899][T10828] attempt to access beyond end of device [ 435.888618][T10828] loop3: rw=2049, want=78, limit=63 [ 435.901598][T10828] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 435.914619][T10828] attempt to access beyond end of device [ 435.920645][T10828] loop3: rw=2049, want=79, limit=63 [ 435.927977][ T26] audit: type=1804 audit(1587301656.901:9): pid=10831 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/161/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 435.928931][T10828] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 435.964949][T10828] attempt to access beyond end of device [ 435.970878][T10828] loop3: rw=2049, want=80, limit=63 [ 435.976419][T10828] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 435.985190][T10828] attempt to access beyond end of device [ 435.991274][T10828] loop3: rw=2049, want=81, limit=63 [ 435.996793][T10828] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 436.022300][T10828] attempt to access beyond end of device [ 436.034491][T10828] loop3: rw=2049, want=130, limit=63 [ 436.045919][T10833] attempt to access beyond end of device [ 436.053862][T10833] loop3: rw=2049, want=78, limit=63 13:07:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:37 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 13:07:37 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 436.080286][T10833] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 436.095093][T10833] attempt to access beyond end of device [ 436.101564][T10833] loop3: rw=2049, want=79, limit=63 13:07:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x100000001) 13:07:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 436.453053][ T26] audit: type=1804 audit(1587301657.421:10): pid=10856 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/162/cgroup.controllers" dev="sda1" ino=16359 res=1 13:07:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 436.979720][ T26] audit: type=1804 audit(1587301657.951:11): pid=10878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/163/cgroup.controllers" dev="sda1" ino=16381 res=1 13:07:38 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[], 0x0) 13:07:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:40 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[], 0x0) 13:07:40 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 439.345214][ T26] audit: type=1804 audit(1587301660.322:12): pid=10897 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/164/cgroup.controllers" dev="sda1" ino=16369 res=1 13:07:40 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:07:40 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:40 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:07:40 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:41 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 440.077672][ T26] audit: type=1804 audit(1587301661.052:13): pid=10936 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/165/cgroup.controllers" dev="sda1" ino=16377 res=1 13:07:43 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[], 0x0) 13:07:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:43 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:07:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:43 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 442.340757][ T26] audit: type=1804 audit(1587301663.312:14): pid=10950 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/166/cgroup.controllers" dev="sda1" ino=16376 res=1 13:07:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 442.729714][ T26] audit: type=1804 audit(1587301663.702:15): pid=10987 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/167/cgroup.controllers" dev="sda1" ino=16378 res=1 13:07:44 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) 13:07:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:46 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:46 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) 13:07:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 445.613661][ T26] audit: type=1804 audit(1587301666.582:16): pid=11025 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/168/cgroup.controllers" dev="sda1" ino=16369 res=1 13:07:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 445.737628][T11039] FAT-fs (loop3): bogus number of reserved sectors [ 445.745883][T11039] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:07:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 445.950207][T11046] FAT-fs (loop3): bogus number of reserved sectors [ 445.976405][T11046] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 446.070557][ T26] audit: type=1804 audit(1587301667.042:17): pid=11051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/169/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 446.185659][T11056] FAT-fs (loop3): bogus number of reserved sectors [ 446.194483][T11056] FAT-fs (loop3): Can't find a valid FAT filesystem [ 446.837188][ T0] NOHZ: local_softirq_pending 08 13:07:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:49 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0) [ 448.433556][T11069] FAT-fs (loop3): bogus number of reserved sectors [ 448.440434][T11069] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:49 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 448.670750][T11086] FAT-fs (loop3): bogus number of reserved sectors [ 448.688843][T11086] FAT-fs (loop3): Can't find a valid FAT filesystem [ 448.699275][ T26] audit: type=1804 audit(1587301669.672:18): pid=11081 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/170/cgroup.controllers" dev="sda1" ino=16377 res=1 13:07:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 448.894132][T11097] FAT-fs (loop3): bogus number of reserved sectors [ 448.903492][T11097] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 449.170787][T11106] FAT-fs (loop3): bogus number of reserved sectors [ 449.177406][T11106] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 449.296738][ T26] audit: type=1804 audit(1587301670.272:19): pid=11110 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/171/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 449.332357][T11114] FAT-fs (loop3): bogus number of reserved sectors 13:07:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f00000019c0)="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", 0x5ad, 0x0, &(0x7f00000006c0)={0xa, 0x4e21, 0x0, @remote}, 0x1c) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/149, 0x95}], 0x1) [ 449.343944][T11114] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 449.548561][T11124] FAT-fs (loop3): bogus number of reserved sectors [ 449.558688][T11124] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:52 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) 13:07:52 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:52 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) 13:07:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:52 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) [ 451.733595][T11148] FAT-fs (loop3): bogus number of reserved sectors [ 451.767572][T11148] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 451.789675][ T26] audit: type=1804 audit(1587301672.762:20): pid=11160 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/172/cgroup.controllers" dev="sda1" ino=16066 res=1 13:07:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 452.002419][T11174] FAT-fs (loop3): bogus number of reserved sectors [ 452.016449][T11174] FAT-fs (loop3): Can't find a valid FAT filesystem [ 452.026274][ T26] audit: type=1804 audit(1587301673.002:21): pid=11172 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/173/cgroup.controllers" dev="sda1" ino=16018 res=1 13:07:53 executing program 4: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 13:07:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 454.499252][T11199] FAT-fs (loop3): bogus number of reserved sectors [ 454.506018][T11199] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:55 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:07:55 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setreuid(0x0, 0x0) setreuid(0x0, 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 13:07:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 454.839035][T11217] FAT-fs (loop3): bogus number of reserved sectors [ 454.849406][T11217] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 454.913863][ T26] audit: type=1804 audit(1587301675.882:22): pid=11225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/174/cgroup.controllers" dev="sda1" ino=16257 res=1 13:07:56 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setreuid(0x0, 0x0) setreuid(0x0, 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 455.112316][T11231] FAT-fs (loop3): bogus number of reserved sectors [ 455.130432][T11231] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 13:07:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 455.372332][ T26] audit: type=1804 audit(1587301676.342:23): pid=11240 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/175/cgroup.controllers" dev="sda1" ino=15825 res=1 13:07:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) [ 455.485903][T11245] FAT-fs (loop3): bogus number of reserved sectors [ 455.500788][T11245] FAT-fs (loop3): Can't find a valid FAT filesystem [ 455.600369][ T26] audit: type=1804 audit(1587301676.572:24): pid=11249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/176/cgroup.controllers" dev="sda1" ino=15842 res=1 13:07:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:07:58 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) exit_group(0x0) 13:07:58 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:07:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 13:07:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x442140, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x14280000003075) 13:07:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 457.906883][T11273] FAT-fs (loop3): bogus number of reserved sectors [ 457.920158][T11273] FAT-fs (loop3): Can't find a valid FAT filesystem [ 457.994217][ T26] audit: type=1804 audit(1587301678.972:25): pid=11278 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/177/cgroup.controllers" dev="sda1" ino=16375 res=1 13:07:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) 13:07:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:07:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) [ 458.171106][T11291] FAT-fs (loop3): bogus number of reserved sectors [ 458.178279][T11291] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 458.352031][T11300] FAT-fs (loop3): bogus number of reserved sectors [ 458.360311][T11300] FAT-fs (loop3): Can't find a valid FAT filesystem 13:07:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) 13:08:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 460.579197][T11317] FAT-fs (loop3): invalid media value (0x00) [ 460.585381][T11317] FAT-fs (loop3): Can't find a valid FAT filesystem 13:08:01 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x442140, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x14280000003075) 13:08:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 460.993390][T11335] FAT-fs (loop3): invalid media value (0x00) [ 461.030240][T11335] FAT-fs (loop3): Can't find a valid FAT filesystem 13:08:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:02 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 461.371352][T11351] FAT-fs (loop3): invalid media value (0x00) [ 461.390190][T11351] FAT-fs (loop3): Can't find a valid FAT filesystem 13:08:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 461.520474][ T26] audit: type=1804 audit(1587301682.492:26): pid=11342 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/181/cgroup.controllers" dev="sda1" ino=16362 res=1 13:08:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 461.660558][ T26] audit: type=1800 audit(1587301682.632:27): pid=11349 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16377 res=0 [ 461.660878][T11358] FAT-fs (loop3): invalid media value (0x00) [ 461.685260][T11358] FAT-fs (loop3): Can't find a valid FAT filesystem 13:08:02 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 462.302286][ T26] audit: type=1804 audit(1587301683.272:28): pid=11372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/182/cgroup.controllers" dev="sda1" ino=16365 res=1 13:08:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 463.623396][T11379] FAT-fs (loop3): invalid media value (0x00) [ 463.629666][T11379] FAT-fs (loop3): Can't find a valid FAT filesystem 13:08:04 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:04 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 464.035747][T11399] FAT-fs (loop3): invalid media value (0x00) [ 464.048500][T11399] FAT-fs (loop3): Can't find a valid FAT filesystem 13:08:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 464.340200][T11412] FAT-fs (loop3): invalid media value (0x00) [ 464.369010][T11412] FAT-fs (loop3): Can't find a valid FAT filesystem [ 464.399415][ T26] audit: type=1804 audit(1587301685.372:29): pid=11404 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/183/cgroup.controllers" dev="sda1" ino=16383 res=1 13:08:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 464.659574][T11421] FAT-fs (loop3): invalid media value (0x00) [ 464.689118][T11421] FAT-fs (loop3): Can't find a valid FAT filesystem 13:08:05 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 465.013628][T11436] FAT-fs (loop3): invalid media value (0x00) [ 465.047204][T11436] FAT-fs (loop3): Can't find a valid FAT filesystem 13:08:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:07 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:07 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:08 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, r0, 0x0, 0x100000001) 13:08:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:08 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:08 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, r0, 0x0, 0x100000001) 13:08:08 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, r0, 0x0, 0x100000001) 13:08:10 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:11 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) ftruncate(0xffffffffffffffff, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) ftruncate(0xffffffffffffffff, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) ftruncate(0xffffffffffffffff, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:14 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 13:08:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 13:08:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:08:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 473.823572][T11596] attempt to access beyond end of device [ 473.858235][T11596] loop3: rw=2049, want=78, limit=63 [ 473.885124][T11596] buffer_io_error: 1 callbacks suppressed [ 473.885132][T11596] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 473.907395][T11596] attempt to access beyond end of device [ 473.913702][T11596] loop3: rw=2049, want=79, limit=63 [ 473.919000][T11596] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 473.930410][T11596] attempt to access beyond end of device [ 473.944760][T11596] loop3: rw=2049, want=80, limit=63 [ 473.956718][T11596] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 473.977530][T11596] attempt to access beyond end of device [ 473.992323][T11596] loop3: rw=2049, want=81, limit=63 [ 474.006774][T11596] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 474.016284][T11596] attempt to access beyond end of device [ 474.022062][T11596] loop3: rw=2049, want=130, limit=63 [ 474.031124][T11600] attempt to access beyond end of device [ 474.037753][T11600] loop3: rw=2049, want=78, limit=63 [ 474.046805][T11600] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 474.057393][T11600] attempt to access beyond end of device [ 474.066441][T11600] loop3: rw=2049, want=79, limit=63 [ 474.071964][T11600] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:17 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:17 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 476.243620][T11620] attempt to access beyond end of device [ 476.256181][T11620] loop3: rw=2049, want=78, limit=63 [ 476.282561][T11620] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 476.328719][T11620] attempt to access beyond end of device [ 476.343252][T11620] loop3: rw=2049, want=79, limit=63 [ 476.348575][T11620] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 476.357359][T11620] attempt to access beyond end of device [ 476.363420][T11620] loop3: rw=2049, want=80, limit=63 [ 476.368733][T11620] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 476.377534][T11620] attempt to access beyond end of device [ 476.383307][T11620] loop3: rw=2049, want=81, limit=63 [ 476.388839][T11620] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 476.397599][T11620] attempt to access beyond end of device [ 476.403497][T11620] loop3: rw=2049, want=130, limit=63 [ 476.418169][T11630] attempt to access beyond end of device 13:08:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 476.427512][T11630] loop3: rw=2049, want=78, limit=63 [ 476.457637][T11630] attempt to access beyond end of device [ 476.477467][T11630] loop3: rw=2049, want=79, limit=63 13:08:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:17 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 476.674090][T11645] attempt to access beyond end of device [ 476.686160][T11645] loop3: rw=2049, want=78, limit=63 [ 476.691595][T11645] attempt to access beyond end of device [ 476.697832][T11645] loop3: rw=2049, want=79, limit=63 [ 476.705792][T11645] attempt to access beyond end of device [ 476.718471][T11645] loop3: rw=2049, want=80, limit=63 [ 476.726633][T11645] attempt to access beyond end of device [ 476.732715][T11645] loop3: rw=2049, want=81, limit=63 [ 476.738157][T11645] attempt to access beyond end of device [ 476.744277][T11645] loop3: rw=2049, want=130, limit=63 [ 476.775273][T11645] attempt to access beyond end of device [ 476.781294][T11645] loop3: rw=2049, want=78, limit=63 13:08:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 476.817032][T11645] attempt to access beyond end of device [ 476.850651][T11645] loop3: rw=2049, want=79, limit=63 13:08:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 477.311987][ T2521] attempt to access beyond end of device [ 477.317657][ T2521] loop3: rw=1, want=78, limit=63 13:08:20 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:20 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 479.615794][ T2521] attempt to access beyond end of device [ 479.637115][ T2521] loop3: rw=1, want=78, limit=63 [ 479.675381][ T2521] buffer_io_error: 9 callbacks suppressed [ 479.675391][ T2521] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:08:20 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 479.952183][ T29] attempt to access beyond end of device [ 479.958001][ T29] loop3: rw=1, want=78, limit=63 [ 479.989532][ T29] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 480.146168][ T26] audit: type=1804 audit(1587301701.124:30): pid=11714 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir062294952/syzkaller.5Iygd5/213/file0/bus" dev="loop3" ino=60 res=1 [ 480.176062][ T26] audit: type=1800 audit(1587301701.154:31): pid=11690 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=16372 res=0 13:08:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 480.236482][ T2521] attempt to access beyond end of device [ 480.244761][ T2521] loop3: rw=1, want=78, limit=63 [ 480.249810][ T2521] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 480.415921][ T26] audit: type=1804 audit(1587301701.394:32): pid=11720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir062294952/syzkaller.5Iygd5/214/file0/bus" dev="loop3" ino=61 res=1 13:08:21 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 480.519502][ T2521] attempt to access beyond end of device [ 480.528615][ T2521] loop3: rw=1, want=78, limit=63 [ 480.560835][ T2521] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 481.008829][ T26] audit: type=1804 audit(1587301701.984:33): pid=11729 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/203/cgroup.controllers" dev="sda1" ino=16380 res=1 13:08:23 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:08:23 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x49, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 482.539784][ T26] audit: type=1804 audit(1587301703.515:34): pid=11742 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir062294952/syzkaller.5Iygd5/215/file0/bus" dev="loop3" ino=62 res=1 13:08:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:08:23 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 482.728399][ T2699] attempt to access beyond end of device [ 482.736804][ T2699] loop3: rw=1, want=78, limit=63 [ 482.768169][ T2699] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 482.830174][ T26] audit: type=1804 audit(1587301703.805:35): pid=11750 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/204/cgroup.controllers" dev="sda1" ino=16374 res=1 13:08:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:23 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 483.011414][T11765] attempt to access beyond end of device [ 483.051188][T11765] loop3: rw=2049, want=78, limit=63 [ 483.069539][T11765] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 483.123704][T11765] attempt to access beyond end of device [ 483.156706][T11765] loop3: rw=2049, want=79, limit=63 [ 483.173622][T11765] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:24 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 483.456113][T11779] attempt to access beyond end of device [ 483.511006][T11779] loop3: rw=2049, want=78, limit=63 [ 483.543962][T11779] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 483.573930][T11779] attempt to access beyond end of device [ 483.583392][T11779] loop3: rw=2049, want=79, limit=63 [ 483.588606][T11779] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 483.777863][ T26] audit: type=1804 audit(1587301704.755:36): pid=11782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/205/cgroup.controllers" dev="sda1" ino=16384 res=1 13:08:26 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:26 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x49, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 485.578488][T11800] attempt to access beyond end of device [ 485.644771][T11800] loop3: rw=2049, want=78, limit=63 [ 485.693200][T11800] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 485.726062][T11800] attempt to access beyond end of device [ 485.738494][T11800] loop3: rw=2049, want=79, limit=63 [ 485.753760][T11800] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:08:27 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 486.078474][T11816] attempt to access beyond end of device [ 486.087887][T11816] loop3: rw=2049, want=78, limit=63 [ 486.101245][ T26] audit: type=1804 audit(1587301707.075:37): pid=11807 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/206/cgroup.controllers" dev="sda1" ino=15986 res=1 [ 486.146794][T11816] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:08:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 486.190184][T11816] attempt to access beyond end of device [ 486.225583][T11816] loop3: rw=2049, want=79, limit=63 [ 486.242548][T11816] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 486.563778][T11826] attempt to access beyond end of device [ 486.589314][T11826] loop3: rw=2049, want=78, limit=63 [ 486.604995][T11826] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:08:27 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 486.625589][T11826] attempt to access beyond end of device [ 486.660414][T11826] loop3: rw=2049, want=79, limit=63 [ 486.676376][T11826] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 486.934343][T11838] attempt to access beyond end of device [ 486.965117][T11838] loop3: rw=2049, want=78, limit=63 [ 487.004921][T11838] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 487.061128][T11838] attempt to access beyond end of device [ 487.073745][T11838] loop3: rw=2049, want=79, limit=63 [ 487.074103][ T26] audit: type=1804 audit(1587301708.055:38): pid=11830 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/207/cgroup.controllers" dev="sda1" ino=16083 res=1 [ 487.082933][T11838] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:29 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) 13:08:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x49, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 488.624847][T11855] attempt to access beyond end of device [ 488.637390][T11855] loop3: rw=2049, want=78, limit=63 [ 488.649480][T11855] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 488.660863][T11855] attempt to access beyond end of device [ 488.666700][T11855] loop3: rw=2049, want=79, limit=63 [ 488.672753][T11855] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 488.682865][T11855] attempt to access beyond end of device [ 488.688767][T11855] loop3: rw=2049, want=80, limit=63 [ 488.695308][T11855] attempt to access beyond end of device [ 488.701478][T11855] loop3: rw=2049, want=81, limit=63 [ 488.707988][T11855] attempt to access beyond end of device [ 488.714477][T11855] loop3: rw=2049, want=130, limit=63 [ 488.735656][T11855] attempt to access beyond end of device [ 488.760128][T11855] loop3: rw=2049, want=78, limit=63 [ 488.783482][T11855] attempt to access beyond end of device [ 488.794719][T11855] loop3: rw=2049, want=79, limit=63 13:08:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:08:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) [ 489.116810][T11873] attempt to access beyond end of device [ 489.147542][T11873] loop3: rw=2049, want=78, limit=63 [ 489.172507][T11873] attempt to access beyond end of device [ 489.195748][T11873] loop3: rw=2049, want=79, limit=63 [ 489.215783][T11873] attempt to access beyond end of device 13:08:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) [ 489.241858][T11873] loop3: rw=2049, want=80, limit=63 [ 489.260435][T11873] attempt to access beyond end of device [ 489.266107][T11873] loop3: rw=2049, want=81, limit=63 [ 489.276130][T11873] attempt to access beyond end of device [ 489.281899][T11873] loop3: rw=2049, want=130, limit=63 [ 489.287952][T11883] attempt to access beyond end of device [ 489.293853][T11883] loop3: rw=2049, want=78, limit=63 [ 489.299107][T11883] attempt to access beyond end of device [ 489.304857][T11883] loop3: rw=2049, want=79, limit=63 13:08:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 489.535909][T11894] attempt to access beyond end of device [ 489.548208][T11894] loop3: rw=2049, want=78, limit=63 [ 489.561171][T11894] attempt to access beyond end of device [ 489.566893][T11894] loop3: rw=2049, want=79, limit=63 [ 489.583398][T11894] attempt to access beyond end of device [ 489.589120][T11894] loop3: rw=2049, want=80, limit=63 [ 489.610336][T11894] attempt to access beyond end of device [ 489.616012][T11894] loop3: rw=2049, want=81, limit=63 [ 489.640940][T11899] attempt to access beyond end of device [ 489.647443][T11899] loop3: rw=2049, want=78, limit=63 [ 489.656001][T11899] attempt to access beyond end of device [ 489.662029][T11899] loop3: rw=2049, want=79, limit=63 13:08:32 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:32 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6e, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 491.692495][ T26] audit: type=1804 audit(1587301712.676:39): pid=11911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/211/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 491.695388][T11913] attempt to access beyond end of device [ 491.813230][T11913] loop3: rw=2049, want=78, limit=63 [ 491.851160][T11913] buffer_io_error: 16 callbacks suppressed [ 491.851173][T11913] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 491.883357][T11913] attempt to access beyond end of device [ 491.889230][T11913] loop3: rw=2049, want=79, limit=63 [ 491.895093][T11913] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 491.904291][T11913] attempt to access beyond end of device [ 491.910768][T11913] loop3: rw=2049, want=80, limit=63 [ 491.927416][T11913] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 491.961430][T11913] attempt to access beyond end of device [ 491.981771][T11913] loop3: rw=2049, want=81, limit=63 [ 492.000661][T11913] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 492.031834][T11926] attempt to access beyond end of device [ 492.038131][T11926] loop3: rw=2049, want=78, limit=63 [ 492.064714][T11926] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:08:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:33 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 492.122024][T11926] attempt to access beyond end of device [ 492.147643][T11926] loop3: rw=2049, want=79, limit=63 13:08:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 492.173281][T11926] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 492.396170][ T26] audit: type=1804 audit(1587301713.376:40): pid=11942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/212/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 492.513932][T11947] attempt to access beyond end of device [ 492.534220][T11947] loop3: rw=2049, want=78, limit=63 [ 492.554136][T11947] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 492.563882][T11947] attempt to access beyond end of device [ 492.569787][T11947] loop3: rw=2049, want=79, limit=63 [ 492.576128][T11947] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 492.585562][T11947] attempt to access beyond end of device [ 492.592210][T11947] loop3: rw=2049, want=80, limit=63 [ 492.597639][T11947] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 492.607843][T11947] attempt to access beyond end of device [ 492.614593][T11947] loop3: rw=2049, want=81, limit=63 [ 492.620707][T11947] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 492.629457][T11947] attempt to access beyond end of device [ 492.636644][T11947] loop3: rw=2049, want=130, limit=63 [ 492.643639][T11951] attempt to access beyond end of device [ 492.649541][T11951] loop3: rw=2049, want=78, limit=63 [ 492.657280][T11951] attempt to access beyond end of device [ 492.664050][T11951] loop3: rw=2049, want=79, limit=63 13:08:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:33 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 493.016018][T11955] attempt to access beyond end of device [ 493.024598][ T26] audit: type=1804 audit(1587301714.006:41): pid=11961 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/213/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 493.116938][T11955] loop3: rw=2049, want=78, limit=63 [ 493.155334][T11955] attempt to access beyond end of device [ 493.207913][T11955] loop3: rw=2049, want=79, limit=63 [ 493.247245][T11955] attempt to access beyond end of device [ 493.267676][T11955] loop3: rw=2049, want=80, limit=63 [ 493.287050][T11955] attempt to access beyond end of device [ 493.308886][T11955] loop3: rw=2049, want=81, limit=63 [ 493.330660][T11969] attempt to access beyond end of device [ 493.339523][T11969] loop3: rw=2049, want=78, limit=63 [ 493.358058][T11969] attempt to access beyond end of device [ 493.378891][T11969] loop3: rw=2049, want=79, limit=63 13:08:35 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:35 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6e, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 494.812621][T11987] attempt to access beyond end of device [ 494.824755][ T26] audit: type=1804 audit(1587301715.806:42): pid=11988 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/214/cgroup.controllers" dev="sda1" ino=16365 res=1 [ 494.840762][T11987] loop3: rw=2049, want=78, limit=63 [ 494.923767][T11987] attempt to access beyond end of device [ 494.935176][T11987] loop3: rw=2049, want=79, limit=63 [ 494.948351][T11987] attempt to access beyond end of device [ 494.960812][T11987] loop3: rw=2049, want=80, limit=63 [ 494.972886][T11987] attempt to access beyond end of device [ 494.984254][T11987] loop3: rw=2049, want=81, limit=63 [ 494.990097][T11987] attempt to access beyond end of device [ 495.003400][T11987] loop3: rw=2049, want=130, limit=63 [ 495.016263][T11996] attempt to access beyond end of device [ 495.022102][T11996] loop3: rw=2049, want=78, limit=63 [ 495.051421][T11996] attempt to access beyond end of device [ 495.057425][T11996] loop3: rw=2049, want=79, limit=63 13:08:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:36 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 495.312665][T12006] attempt to access beyond end of device [ 495.318400][ T26] audit: type=1804 audit(1587301716.296:43): pid=12004 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/215/cgroup.controllers" dev="sda1" ino=16378 res=1 [ 495.349762][T12006] loop3: rw=2049, want=78, limit=63 [ 495.355483][T12006] attempt to access beyond end of device 13:08:36 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 495.419642][T12006] loop3: rw=2049, want=79, limit=63 [ 495.425083][T12006] attempt to access beyond end of device [ 495.453208][T12006] loop3: rw=2049, want=80, limit=63 [ 495.459928][T12006] attempt to access beyond end of device [ 495.474568][T12006] loop3: rw=2049, want=81, limit=63 [ 495.492735][T12016] attempt to access beyond end of device [ 495.501344][T12016] loop3: rw=2049, want=78, limit=63 [ 495.513984][T12016] attempt to access beyond end of device [ 495.522102][T12016] loop3: rw=2049, want=79, limit=63 13:08:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:08:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 495.928714][ T26] audit: type=1804 audit(1587301716.906:44): pid=12029 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/216/cgroup.controllers" dev="sda1" ino=16375 res=1 13:08:38 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:38 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6e, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 497.833532][T12046] attempt to access beyond end of device [ 497.839408][T12046] loop3: rw=2049, want=78, limit=63 [ 497.844786][T12046] buffer_io_error: 20 callbacks suppressed [ 497.844799][T12046] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 497.863431][T12046] attempt to access beyond end of device [ 497.869705][T12046] loop3: rw=2049, want=79, limit=63 [ 497.875356][T12046] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 497.884599][T12046] attempt to access beyond end of device [ 497.891100][T12046] loop3: rw=2049, want=80, limit=63 [ 497.896576][T12046] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 497.905948][T12046] attempt to access beyond end of device [ 497.912260][T12046] loop3: rw=2049, want=81, limit=63 [ 497.917615][T12046] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 497.928505][T12046] attempt to access beyond end of device [ 497.934746][T12046] loop3: rw=2049, want=130, limit=63 [ 497.952734][T12058] attempt to access beyond end of device [ 497.967684][T12058] loop3: rw=2049, want=78, limit=63 [ 497.974649][T12058] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 497.983616][T12058] attempt to access beyond end of device [ 497.990553][T12058] loop3: rw=2049, want=79, limit=63 [ 498.006888][T12058] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:39 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:39 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 498.435138][T12069] attempt to access beyond end of device [ 498.441028][ T26] audit: type=1804 audit(1587301719.417:45): pid=12066 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/218/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 498.466109][T12069] loop3: rw=2049, want=78, limit=63 [ 498.473088][T12069] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 498.482974][T12069] attempt to access beyond end of device [ 498.488843][T12069] loop3: rw=2049, want=79, limit=63 [ 498.495171][T12069] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 498.505418][T12069] attempt to access beyond end of device [ 498.511831][T12069] loop3: rw=2049, want=80, limit=63 [ 498.517347][T12069] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 498.526757][T12069] attempt to access beyond end of device [ 498.533169][T12069] loop3: rw=2049, want=81, limit=63 [ 498.538626][T12069] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 498.548482][T12069] attempt to access beyond end of device [ 498.554859][T12069] loop3: rw=2049, want=130, limit=63 [ 498.568871][T12079] attempt to access beyond end of device [ 498.608773][T12079] loop3: rw=2049, want=78, limit=63 [ 498.639313][T12079] attempt to access beyond end of device [ 498.669272][T12079] loop3: rw=2049, want=79, limit=63 13:08:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 499.006510][ T26] audit: type=1804 audit(1587301719.987:46): pid=12085 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/219/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 499.028045][T12086] attempt to access beyond end of device [ 499.037490][T12086] loop3: rw=2049, want=78, limit=63 [ 499.043008][T12086] attempt to access beyond end of device [ 499.048898][T12086] loop3: rw=2049, want=79, limit=63 [ 499.054479][T12086] attempt to access beyond end of device [ 499.060399][T12086] loop3: rw=2049, want=80, limit=63 [ 499.065966][T12086] attempt to access beyond end of device [ 499.071972][T12086] loop3: rw=2049, want=81, limit=63 [ 499.080606][T12086] attempt to access beyond end of device [ 499.086586][T12086] loop3: rw=2049, want=114, limit=63 [ 499.097156][T12086] attempt to access beyond end of device 13:08:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 499.103285][T12086] loop3: rw=2049, want=78, limit=63 [ 499.108818][T12086] attempt to access beyond end of device [ 499.114784][T12086] loop3: rw=2049, want=79, limit=63 [ 499.337211][T12094] attempt to access beyond end of device [ 499.360164][T12094] loop3: rw=2049, want=78, limit=63 [ 499.381624][T12094] attempt to access beyond end of device [ 499.401969][T12094] loop3: rw=2049, want=79, limit=63 [ 499.408456][T12094] attempt to access beyond end of device [ 499.448463][T12094] loop3: rw=2049, want=80, limit=63 [ 499.454755][T12094] attempt to access beyond end of device [ 499.473488][T12094] loop3: rw=2049, want=81, limit=63 [ 499.489588][T12100] attempt to access beyond end of device [ 499.495261][T12100] loop3: rw=2049, want=78, limit=63 [ 499.519184][T12100] attempt to access beyond end of device [ 499.525041][T12100] loop3: rw=2049, want=79, limit=63 13:08:41 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:41 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x80, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 500.909322][T12109] attempt to access beyond end of device [ 500.931285][T12109] loop3: rw=2049, want=78, limit=63 [ 500.967146][T12109] attempt to access beyond end of device [ 500.968369][ T26] audit: type=1804 audit(1587301721.947:47): pid=12111 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/220/cgroup.controllers" dev="sda1" ino=16359 res=1 [ 500.990573][T12109] loop3: rw=2049, want=79, limit=63 [ 501.037359][T12109] attempt to access beyond end of device [ 501.062601][T12109] loop3: rw=2049, want=80, limit=63 [ 501.084166][T12109] attempt to access beyond end of device [ 501.114097][T12109] loop3: rw=2049, want=81, limit=63 [ 501.153227][T12120] attempt to access beyond end of device [ 501.162096][T12120] loop3: rw=2049, want=78, limit=63 [ 501.183446][T12120] attempt to access beyond end of device [ 501.199365][T12120] loop3: rw=2049, want=79, limit=63 13:08:42 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x80, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 501.508221][T12133] attempt to access beyond end of device [ 501.587862][T12133] loop3: rw=2049, want=78, limit=63 13:08:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 501.609651][T12133] attempt to access beyond end of device [ 501.636120][T12133] loop3: rw=2049, want=79, limit=63 [ 501.643618][T12133] attempt to access beyond end of device [ 501.652877][T12133] loop3: rw=2049, want=80, limit=63 13:08:42 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 501.658215][T12133] attempt to access beyond end of device [ 501.664402][T12133] loop3: rw=2049, want=81, limit=63 [ 501.672661][T12133] attempt to access beyond end of device [ 501.678392][T12133] loop3: rw=2049, want=130, limit=63 [ 501.684801][T12147] attempt to access beyond end of device [ 501.693471][T12147] loop3: rw=2049, want=78, limit=63 [ 501.705456][T12147] attempt to access beyond end of device [ 501.720000][T12147] loop3: rw=2049, want=79, limit=63 [ 501.927016][ T26] audit: type=1804 audit(1587301722.907:48): pid=12152 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/222/cgroup.controllers" dev="sda1" ino=15809 res=1 13:08:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:44 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:44 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 503.963553][ T26] audit: type=1804 audit(1587301724.947:49): pid=12169 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/223/cgroup.controllers" dev="sda1" ino=16375 res=1 [ 504.059875][T12164] attempt to access beyond end of device [ 504.108976][T12164] loop3: rw=2049, want=78, limit=63 [ 504.131644][T12164] buffer_io_error: 26 callbacks suppressed [ 504.131657][T12164] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 504.147323][T12164] attempt to access beyond end of device [ 504.155347][T12164] loop3: rw=2049, want=79, limit=63 [ 504.161190][T12164] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 504.170632][T12164] attempt to access beyond end of device [ 504.178296][T12164] loop3: rw=2049, want=80, limit=63 [ 504.184017][T12164] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 504.193651][T12164] attempt to access beyond end of device [ 504.203510][T12164] loop3: rw=2049, want=81, limit=63 [ 504.220375][T12164] Buffer I/O error on dev loop3, logical block 80, lost async page write 13:08:45 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 504.253598][T12164] attempt to access beyond end of device [ 504.267242][T12164] loop3: rw=2049, want=130, limit=63 [ 504.292412][T12175] attempt to access beyond end of device [ 504.298202][T12175] loop3: rw=2049, want=78, limit=63 [ 504.314769][T12175] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 504.326684][T12175] attempt to access beyond end of device [ 504.332896][T12175] loop3: rw=2049, want=79, limit=63 [ 504.342514][T12175] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:45 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7752ba8b280acd59cca47d767dab91dde424e9064df99e8e5d05940c7907e80cbd81c959cd626af19a5aa44c2de488a14f168b81190b46422f77a3ed97189de5ddd9d94d9582b9aa822077c"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 504.463473][ T26] audit: type=1804 audit(1587301725.447:50): pid=12180 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/224/cgroup.controllers" dev="sda1" ino=16382 res=1 13:08:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x80, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) 13:08:45 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 504.683907][T12189] attempt to access beyond end of device [ 504.727854][T12189] loop3: rw=2049, want=78, limit=63 [ 504.734127][T12189] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 504.742865][T12189] attempt to access beyond end of device [ 504.749545][T12189] loop3: rw=2049, want=79, limit=63 [ 504.754836][T12189] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 504.766634][T12189] attempt to access beyond end of device [ 504.772719][T12189] loop3: rw=2049, want=80, limit=63 [ 504.778054][T12189] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 504.789615][T12189] attempt to access beyond end of device [ 504.797140][T12189] loop3: rw=2049, want=81, limit=63 [ 504.805052][T12189] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 504.814895][T12189] attempt to access beyond end of device [ 504.822763][T12189] loop3: rw=2049, want=130, limit=63 13:08:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:45 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 504.829732][T12197] attempt to access beyond end of device [ 504.848508][T12197] loop3: rw=2049, want=78, limit=63 [ 504.878017][T12197] attempt to access beyond end of device [ 504.886897][T12197] loop3: rw=2049, want=79, limit=63 13:08:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x803) write$binfmt_elf32(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 505.022960][ T26] audit: type=1804 audit(1587301726.007:51): pid=12202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/225/cgroup.controllers" dev="sda1" ino=16382 res=1 [ 505.125884][T12208] attempt to access beyond end of device [ 505.155959][T12208] loop3: rw=2049, want=78, limit=63 [ 505.177976][T12208] attempt to access beyond end of device [ 505.199981][T12208] loop3: rw=2049, want=79, limit=63 [ 505.220831][T12208] attempt to access beyond end of device [ 505.242827][T12208] loop3: rw=2049, want=80, limit=63 [ 505.262071][T12208] attempt to access beyond end of device [ 505.270444][T12208] loop3: rw=2049, want=81, limit=63 [ 505.276483][T12208] attempt to access beyond end of device [ 505.301308][T12208] loop3: rw=2049, want=130, limit=63 [ 505.314710][T12213] attempt to access beyond end of device [ 505.323583][T12213] loop3: rw=2049, want=78, limit=63 [ 505.336496][T12213] attempt to access beyond end of device [ 505.346917][T12213] loop3: rw=2049, want=79, limit=63 13:08:47 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:47 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x0) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 506.993259][T12226] attempt to access beyond end of device [ 506.999160][T12226] loop3: rw=2049, want=78, limit=63 [ 507.004500][T12226] attempt to access beyond end of device [ 507.010285][T12226] loop3: rw=2049, want=79, limit=63 [ 507.015712][T12226] attempt to access beyond end of device [ 507.021512][T12226] loop3: rw=2049, want=80, limit=63 [ 507.028468][T12226] attempt to access beyond end of device [ 507.034350][T12226] loop3: rw=2049, want=81, limit=63 [ 507.039995][T12226] attempt to access beyond end of device [ 507.042347][ T26] audit: type=1804 audit(1587301728.028:52): pid=12225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/226/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 507.045823][T12226] loop3: rw=2049, want=130, limit=63 [ 507.088822][T12226] attempt to access beyond end of device [ 507.096114][T12226] loop3: rw=2049, want=147, limit=63 13:08:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x0) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 507.332413][T12241] attempt to access beyond end of device [ 507.344740][T12241] loop3: rw=2049, want=78, limit=63 [ 507.368233][T12241] attempt to access beyond end of device [ 507.374087][T12241] loop3: rw=2049, want=79, limit=63 [ 507.379373][T12241] attempt to access beyond end of device [ 507.385017][T12241] loop3: rw=2049, want=80, limit=63 [ 507.431077][T12241] attempt to access beyond end of device [ 507.436909][T12241] loop3: rw=2049, want=81, limit=63 [ 507.459145][T12247] attempt to access beyond end of device [ 507.464968][T12247] loop3: rw=2049, want=147, limit=63 13:08:48 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12f, &(0x7f0000000200)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:48 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x89, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:48 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x0) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) [ 507.743919][T12255] attempt to access beyond end of device [ 507.774910][ T26] audit: type=1804 audit(1587301728.758:53): pid=12257 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/227/cgroup.controllers" dev="sda1" ino=16380 res=1 [ 507.820495][T12255] loop3: rw=2049, want=78, limit=63 [ 507.825811][T12255] attempt to access beyond end of device 13:08:48 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 507.865922][T12255] loop3: rw=2049, want=79, limit=63 [ 507.872584][T12255] attempt to access beyond end of device [ 507.883986][T12255] loop3: rw=2049, want=80, limit=63 [ 507.910850][T12255] attempt to access beyond end of device [ 507.916707][T12255] loop3: rw=2049, want=81, limit=63 [ 507.938840][T12267] attempt to access beyond end of device [ 507.944685][T12267] loop3: rw=2049, want=147, limit=63 13:08:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:49 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 508.207280][T12276] attempt to access beyond end of device [ 508.225274][T12276] loop3: rw=2049, want=78, limit=63 [ 508.241160][T12276] attempt to access beyond end of device [ 508.246908][T12276] loop3: rw=2049, want=79, limit=63 [ 508.252600][T12276] attempt to access beyond end of device [ 508.258672][T12276] loop3: rw=2049, want=80, limit=63 [ 508.264350][T12276] attempt to access beyond end of device [ 508.271475][T12276] loop3: rw=2049, want=81, limit=63 [ 508.276859][T12276] attempt to access beyond end of device [ 508.282923][T12276] loop3: rw=2049, want=130, limit=63 [ 508.338940][ T2699] attempt to access beyond end of device [ 508.345349][ T2699] loop3: rw=1, want=78, limit=63 13:08:51 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:51 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b130836a6b23abe793b1c9df", [[], [], [], []]}, 0xa01) [ 510.148308][T12289] attempt to access beyond end of device [ 510.154132][T12289] loop3: rw=2049, want=78, limit=63 [ 510.159765][T12289] buffer_io_error: 25 callbacks suppressed [ 510.159776][T12289] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 510.174990][T12289] attempt to access beyond end of device [ 510.181373][T12289] loop3: rw=2049, want=79, limit=63 [ 510.187044][T12289] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 510.197485][T12289] attempt to access beyond end of device [ 510.209023][T12289] loop3: rw=2049, want=80, limit=63 [ 510.214433][T12289] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 510.223607][T12289] attempt to access beyond end of device [ 510.229687][T12289] loop3: rw=2049, want=81, limit=63 [ 510.235687][T12289] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 510.244971][T12289] attempt to access beyond end of device [ 510.251161][T12289] loop3: rw=2049, want=130, limit=63 [ 510.272160][ T26] audit: type=1804 audit(1587301731.258:54): pid=12294 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/228/cgroup.controllers" dev="sda1" ino=16357 res=1 [ 510.418047][ T2699] attempt to access beyond end of device [ 510.423717][ T2699] loop3: rw=1, want=78, limit=63 [ 510.455230][ T2699] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:08:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x89, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa01) 13:08:51 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 510.802061][T12312] attempt to access beyond end of device [ 510.808319][T12312] loop3: rw=2049, want=78, limit=63 [ 510.813586][T12312] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 510.822481][T12312] attempt to access beyond end of device [ 510.828330][T12312] loop3: rw=2049, want=79, limit=63 [ 510.833674][T12312] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:08:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 510.849985][T12312] attempt to access beyond end of device [ 510.855978][T12312] loop3: rw=2049, want=80, limit=63 [ 510.861904][T12312] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 510.870442][T12312] attempt to access beyond end of device [ 510.876152][T12312] loop3: rw=2049, want=81, limit=63 [ 510.881451][T12312] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 510.890057][T12312] attempt to access beyond end of device [ 510.895784][T12312] loop3: rw=2049, want=130, limit=63 13:08:51 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, 0x0, 0x0) [ 511.013920][ T2521] attempt to access beyond end of device [ 511.024273][ T2521] loop3: rw=1, want=78, limit=63 [ 511.039047][ T2521] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 511.047843][ T26] audit: type=1804 audit(1587301732.028:55): pid=12325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/230/cgroup.controllers" dev="sda1" ino=16366 res=1 13:08:54 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, 0x0, 0x0) 13:08:54 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 513.286205][T12346] attempt to access beyond end of device [ 513.329450][T12358] ptrace attach of "/root/syz-executor.0"[12350] was attempted by "/root/syz-executor.0"[12358] [ 513.352225][T12346] loop3: rw=2049, want=78, limit=63 [ 513.383637][T12346] attempt to access beyond end of device [ 513.392291][T12346] loop3: rw=2049, want=79, limit=63 [ 513.398595][T12346] attempt to access beyond end of device [ 513.404549][T12346] loop3: rw=2049, want=80, limit=63 [ 513.410676][T12346] attempt to access beyond end of device [ 513.416469][T12346] loop3: rw=2049, want=81, limit=63 [ 513.477378][ T2699] attempt to access beyond end of device [ 513.492991][ T2699] loop3: rw=1, want=78, limit=63 13:08:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x89, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:54 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 13:08:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:54 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, 0x0, 0x0) [ 513.957924][T12377] attempt to access beyond end of device [ 513.968948][ T26] audit: type=1804 audit(1587301734.958:56): pid=12376 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/232/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 513.972500][T12377] loop3: rw=2049, want=78, limit=63 [ 514.000277][T12377] attempt to access beyond end of device [ 514.006570][T12377] loop3: rw=2049, want=79, limit=63 [ 514.012135][T12377] attempt to access beyond end of device [ 514.018258][T12377] loop3: rw=2049, want=80, limit=63 [ 514.023721][T12377] attempt to access beyond end of device [ 514.029793][T12377] loop3: rw=2049, want=81, limit=63 [ 514.035347][T12377] attempt to access beyond end of device [ 514.041481][T12377] loop3: rw=2049, want=130, limit=63 13:08:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], []]}, 0x458) 13:08:55 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 514.141079][ T2521] attempt to access beyond end of device [ 514.152300][ T2521] loop3: rw=1, want=78, limit=63 [ 514.399134][T12394] attempt to access beyond end of device [ 514.404954][T12394] loop3: rw=2049, want=78, limit=63 [ 514.410954][T12394] attempt to access beyond end of device [ 514.416800][T12394] loop3: rw=2049, want=79, limit=63 [ 514.422981][T12394] attempt to access beyond end of device [ 514.429385][T12394] loop3: rw=2049, want=80, limit=63 [ 514.434752][T12394] attempt to access beyond end of device [ 514.442318][T12394] loop3: rw=2049, want=81, limit=63 13:08:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], []]}, 0x458) [ 514.448307][T12394] attempt to access beyond end of device [ 514.454127][T12394] loop3: rw=2049, want=130, limit=63 [ 514.466240][T12394] attempt to access beyond end of device [ 514.472988][T12394] loop3: rw=2049, want=78, limit=63 [ 514.628777][T12402] attempt to access beyond end of device [ 514.668323][T12402] loop3: rw=2049, want=78, limit=63 13:08:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 514.687439][T12402] attempt to access beyond end of device [ 514.709961][T12402] loop3: rw=2049, want=79, limit=63 [ 514.715236][T12402] attempt to access beyond end of device 13:08:55 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 514.780317][T12402] loop3: rw=2049, want=80, limit=63 [ 514.785569][T12402] attempt to access beyond end of device [ 514.795004][ T26] audit: type=1804 audit(1587301735.778:57): pid=12408 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/233/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 514.832321][T12402] loop3: rw=2049, want=81, limit=63 [ 514.844919][T12409] attempt to access beyond end of device [ 514.851558][T12409] loop3: rw=2049, want=78, limit=63 13:08:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], []]}, 0x458) [ 515.175260][T12417] attempt to access beyond end of device [ 515.181674][T12417] loop3: rw=2049, want=78, limit=63 [ 515.187070][T12417] buffer_io_error: 20 callbacks suppressed [ 515.187080][T12417] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 515.203471][T12417] attempt to access beyond end of device [ 515.209997][T12417] loop3: rw=2049, want=79, limit=63 [ 515.219146][T12417] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 515.238315][T12417] attempt to access beyond end of device [ 515.251178][T12417] loop3: rw=2049, want=80, limit=63 [ 515.263503][T12417] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 515.276280][T12417] attempt to access beyond end of device [ 515.282986][T12417] loop3: rw=2049, want=81, limit=63 [ 515.288974][T12417] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 515.298539][T12417] attempt to access beyond end of device [ 515.304413][T12417] loop3: rw=2049, want=130, limit=63 [ 515.312975][T12423] attempt to access beyond end of device [ 515.319250][T12423] loop3: rw=2049, want=78, limit=63 [ 515.324829][T12423] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:08:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8e, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d1"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:08:57 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:08:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:08:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x72d) 13:08:57 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) [ 517.066083][T12441] attempt to access beyond end of device [ 517.092025][ T26] audit: type=1804 audit(1587301738.069:58): pid=12439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/234/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 517.127324][T12441] loop3: rw=2049, want=78, limit=63 13:08:58 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 517.162898][T12441] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 517.189619][T12441] attempt to access beyond end of device [ 517.198324][T12441] loop3: rw=2049, want=79, limit=63 [ 517.203658][T12441] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 517.213792][T12441] attempt to access beyond end of device [ 517.220311][T12441] loop3: rw=2049, want=80, limit=63 [ 517.225771][T12441] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 517.236593][T12441] attempt to access beyond end of device [ 517.250475][T12441] loop3: rw=2049, want=81, limit=63 [ 517.258052][T12441] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 517.273373][T12451] attempt to access beyond end of device [ 517.281931][T12451] loop3: rw=2049, want=78, limit=63 [ 517.294556][T12451] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:08:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x72d) 13:08:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 517.710572][T12461] attempt to access beyond end of device [ 517.736921][T12461] loop3: rw=2049, want=78, limit=63 [ 517.751943][T12461] attempt to access beyond end of device 13:08:58 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 517.766367][T12461] loop3: rw=2049, want=79, limit=63 [ 517.779498][T12461] attempt to access beyond end of device [ 517.785432][T12461] loop3: rw=2049, want=80, limit=63 [ 517.792411][T12461] attempt to access beyond end of device [ 517.798871][T12461] loop3: rw=2049, want=81, limit=63 [ 517.812498][T12461] attempt to access beyond end of device [ 517.840434][T12461] loop3: rw=2049, want=78, limit=63 13:08:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x72d) [ 517.885070][ T26] audit: type=1804 audit(1587301738.859:59): pid=12466 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/235/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 518.150722][T12473] attempt to access beyond end of device [ 518.163187][T12473] loop3: rw=2049, want=78, limit=63 [ 518.176573][T12473] attempt to access beyond end of device [ 518.189472][T12473] loop3: rw=2049, want=79, limit=63 [ 518.202061][T12473] attempt to access beyond end of device [ 518.214753][T12473] loop3: rw=2049, want=80, limit=63 [ 518.226886][T12473] attempt to access beyond end of device [ 518.240149][T12473] loop3: rw=2049, want=81, limit=63 [ 518.254800][T12473] attempt to access beyond end of device [ 518.286129][T12473] loop3: rw=2049, want=78, limit=63 13:08:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x897) [ 518.648616][T12482] attempt to access beyond end of device [ 518.654320][T12482] loop3: rw=2049, want=78, limit=63 [ 518.660592][T12482] attempt to access beyond end of device [ 518.667593][T12482] loop3: rw=2049, want=79, limit=63 [ 518.672978][T12482] attempt to access beyond end of device [ 518.679543][T12482] loop3: rw=2049, want=80, limit=63 [ 518.684806][T12482] attempt to access beyond end of device [ 518.692154][T12482] loop3: rw=2049, want=81, limit=63 [ 518.698778][T12482] attempt to access beyond end of device [ 518.704427][T12482] loop3: rw=2049, want=130, limit=63 [ 518.715514][T12482] attempt to access beyond end of device [ 518.721896][T12482] loop3: rw=2049, want=78, limit=63 13:09:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8e, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d1"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:09:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7", [[], [], [], []]}, 0x897) 13:09:00 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:09:00 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) [ 520.079893][T12503] attempt to access beyond end of device [ 520.086010][T12503] loop3: rw=2049, want=78, limit=63 [ 520.092358][T12503] attempt to access beyond end of device [ 520.102000][T12503] loop3: rw=2049, want=79, limit=63 [ 520.134226][T12503] attempt to access beyond end of device [ 520.167869][ T26] audit: type=1804 audit(1587301741.149:60): pid=12505 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/236/cgroup.controllers" dev="sda1" ino=16357 res=1 [ 520.200854][T12503] loop3: rw=2049, want=80, limit=63 [ 520.231843][T12503] buffer_io_error: 17 callbacks suppressed [ 520.231857][T12503] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 520.273688][T12503] attempt to access beyond end of device [ 520.292291][T12503] loop3: rw=2049, want=81, limit=63 [ 520.313393][T12503] Buffer I/O error on dev loop3, logical block 80, lost async page write 13:09:01 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(0x0, 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 520.341944][T12512] attempt to access beyond end of device [ 520.348594][T12512] loop3: rw=2049, want=78, limit=63 [ 520.353829][T12512] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x897) 13:09:01 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(0x0, 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 520.627074][T12521] attempt to access beyond end of device 13:09:01 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(0x0, 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 520.701397][T12521] loop3: rw=2049, want=78, limit=63 [ 520.719424][T12521] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 520.756790][T12521] attempt to access beyond end of device [ 520.762648][T12521] loop3: rw=2049, want=79, limit=63 [ 520.768833][T12521] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 520.778377][T12521] attempt to access beyond end of device [ 520.784237][T12521] loop3: rw=2049, want=80, limit=63 [ 520.790461][T12521] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 520.800631][T12521] attempt to access beyond end of device 13:09:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 520.845820][T12521] loop3: rw=2049, want=81, limit=63 [ 520.863523][T12521] Buffer I/O error on dev loop3, logical block 80, lost async page write 13:09:01 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 520.895942][T12528] attempt to access beyond end of device [ 520.902776][T12528] loop3: rw=2049, want=78, limit=63 [ 520.920350][T12528] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 521.015400][ T26] audit: type=1804 audit(1587301741.989:61): pid=12533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/237/cgroup.controllers" dev="sda1" ino=15906 res=1 13:09:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8e, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d1"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x94c) 13:09:04 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:09:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:09:04 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) [ 523.129530][T12553] attempt to access beyond end of device [ 523.135335][T12553] loop3: rw=2049, want=78, limit=63 [ 523.141354][T12553] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 523.153517][T12553] attempt to access beyond end of device [ 523.159485][T12553] loop3: rw=2049, want=79, limit=63 [ 523.164812][T12553] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 523.175991][T12553] attempt to access beyond end of device [ 523.179910][ T26] audit: type=1804 audit(1587301744.159:62): pid=12551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/238/cgroup.controllers" dev="sda1" ino=16177 res=1 [ 523.181792][T12553] loop3: rw=2049, want=80, limit=63 [ 523.213582][T12553] attempt to access beyond end of device [ 523.220272][T12553] loop3: rw=2049, want=81, limit=63 [ 523.225566][T12553] attempt to access beyond end of device [ 523.231325][T12553] loop3: rw=2049, want=130, limit=63 [ 523.240988][T12553] attempt to access beyond end of device [ 523.251011][T12553] loop3: rw=2049, want=78, limit=63 13:09:04 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:09:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x94c) 13:09:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:09:04 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 523.536136][T12573] attempt to access beyond end of device [ 523.542037][T12573] loop3: rw=2049, want=78, limit=63 [ 523.548326][T12573] attempt to access beyond end of device [ 523.554038][T12573] loop3: rw=2049, want=79, limit=63 [ 523.560210][T12573] attempt to access beyond end of device [ 523.568147][T12573] loop3: rw=2049, want=80, limit=63 [ 523.575546][T12573] attempt to access beyond end of device [ 523.583267][T12573] loop3: rw=2049, want=81, limit=63 [ 523.589125][T12573] attempt to access beyond end of device [ 523.594898][T12573] loop3: rw=2049, want=130, limit=63 [ 523.608300][T12573] attempt to access beyond end of device [ 523.614789][T12573] loop3: rw=2049, want=78, limit=63 13:09:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x94c) [ 523.643499][ T26] audit: type=1804 audit(1587301744.619:63): pid=12581 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/239/cgroup.controllers" dev="sda1" ino=16113 res=1 13:09:04 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 523.814957][T12585] attempt to access beyond end of device [ 523.829125][T12585] loop3: rw=2049, want=78, limit=63 [ 523.840784][T12585] attempt to access beyond end of device [ 523.853126][T12585] loop3: rw=2049, want=79, limit=63 [ 523.886437][T12585] attempt to access beyond end of device [ 523.892230][T12585] loop3: rw=2049, want=80, limit=63 [ 523.906427][T12585] attempt to access beyond end of device [ 523.912156][T12585] loop3: rw=2049, want=81, limit=63 [ 523.927429][T12591] attempt to access beyond end of device [ 523.933096][T12591] loop3: rw=2049, want=78, limit=63 13:09:07 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x90, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c0"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:09:07 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:09:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93", [[], [], [], []]}, 0x9a7) 13:09:07 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:07 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) [ 526.202289][T12608] attempt to access beyond end of device [ 526.213449][T12608] loop3: rw=2049, want=78, limit=63 [ 526.219863][T12608] buffer_io_error: 13 callbacks suppressed [ 526.219874][T12608] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 526.234524][T12608] attempt to access beyond end of device [ 526.240649][T12608] loop3: rw=2049, want=79, limit=63 [ 526.246545][T12608] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 526.255206][T12608] attempt to access beyond end of device [ 526.262182][T12608] loop3: rw=2049, want=80, limit=63 [ 526.267946][T12608] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 526.279215][T12608] attempt to access beyond end of device [ 526.288388][T12608] loop3: rw=2049, want=81, limit=63 [ 526.300881][T12608] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 526.318600][T12608] attempt to access beyond end of device [ 526.330911][T12608] loop3: rw=2049, want=130, limit=63 13:09:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:09:07 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 526.347951][T12608] attempt to access beyond end of device [ 526.356548][T12608] loop3: rw=2049, want=78, limit=63 [ 526.361997][T12608] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93", [[], [], [], []]}, 0x9a7) 13:09:07 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 526.553326][ T26] audit: type=1804 audit(1587301747.530:64): pid=12631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/241/cgroup.controllers" dev="sda1" ino=16289 res=1 [ 526.650745][T12636] attempt to access beyond end of device [ 526.674392][T12636] loop3: rw=2049, want=78, limit=63 [ 526.713499][T12636] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 526.767081][T12636] attempt to access beyond end of device [ 526.781591][T12636] loop3: rw=2049, want=79, limit=63 [ 526.792505][T12636] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:09:07 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:09:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 526.818290][T12636] attempt to access beyond end of device [ 526.838403][T12636] loop3: rw=2049, want=80, limit=63 [ 526.855707][T12636] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 526.896199][T12636] attempt to access beyond end of device [ 526.901872][T12636] loop3: rw=2049, want=81, limit=63 [ 526.928489][T12636] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 526.944573][T12643] attempt to access beyond end of device [ 526.950617][T12643] loop3: rw=2049, want=78, limit=63 [ 526.961480][T12643] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 527.050637][ T26] audit: type=1804 audit(1587301748.030:65): pid=12652 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/242/cgroup.controllers" dev="sda1" ino=16384 res=1 13:09:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x90, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c0"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:10 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:09:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93", [[], [], [], []]}, 0x9a7) 13:09:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:09:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:10 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 529.342969][T12664] attempt to access beyond end of device [ 529.402466][T12664] loop3: rw=2049, want=78, limit=63 13:09:10 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 529.424902][ T26] audit: type=1804 audit(1587301750.400:66): pid=12672 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/243/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 529.445892][T12664] attempt to access beyond end of device [ 529.485252][T12664] loop3: rw=2049, want=79, limit=63 [ 529.502027][T12664] attempt to access beyond end of device [ 529.523912][T12664] loop3: rw=2049, want=80, limit=63 [ 529.550514][T12664] attempt to access beyond end of device [ 529.572081][T12664] loop3: rw=2049, want=81, limit=63 [ 529.592539][T12664] attempt to access beyond end of device 13:09:10 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 529.610492][T12664] loop3: rw=2049, want=130, limit=63 [ 529.633355][T12684] attempt to access beyond end of device [ 529.642926][T12684] loop3: rw=2049, want=78, limit=63 13:09:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9d4) 13:09:10 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 13:09:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 529.951115][T12696] attempt to access beyond end of device [ 529.992774][T12696] loop3: rw=2049, want=78, limit=63 [ 530.034785][T12696] attempt to access beyond end of device [ 530.045237][ T26] audit: type=1804 audit(1587301751.030:67): pid=12703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/244/cgroup.controllers" dev="sda1" ino=16384 res=1 [ 530.088149][T12696] loop3: rw=2049, want=79, limit=63 [ 530.113468][T12696] attempt to access beyond end of device [ 530.139559][T12696] loop3: rw=2049, want=80, limit=63 [ 530.162725][T12696] attempt to access beyond end of device [ 530.184968][T12696] loop3: rw=2049, want=81, limit=63 [ 530.207877][T12696] attempt to access beyond end of device [ 530.230312][T12696] loop3: rw=2049, want=130, limit=63 [ 530.253406][T12706] attempt to access beyond end of device [ 530.259582][T12706] loop3: rw=2049, want=78, limit=63 13:09:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9d4) [ 530.505580][T12711] attempt to access beyond end of device [ 530.525730][T12711] loop3: rw=2049, want=78, limit=63 [ 530.530973][T12711] attempt to access beyond end of device [ 530.545734][T12711] loop3: rw=2049, want=79, limit=63 [ 530.567921][T12711] attempt to access beyond end of device [ 530.573579][T12711] loop3: rw=2049, want=80, limit=63 [ 530.579691][T12711] attempt to access beyond end of device [ 530.585497][T12711] loop3: rw=2049, want=81, limit=63 [ 530.593841][T12711] attempt to access beyond end of device [ 530.600036][T12711] loop3: rw=2049, want=78, limit=63 13:09:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x90, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c0"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:13 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 13:09:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 13:09:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9d4) 13:09:13 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 13:09:13 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 532.441811][ T26] audit: type=1804 audit(1587301753.420:68): pid=12725 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/245/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 532.508634][T12732] attempt to access beyond end of device [ 532.531833][T12732] loop3: rw=2049, want=78, limit=63 13:09:13 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) [ 532.558766][T12732] buffer_io_error: 15 callbacks suppressed [ 532.558779][T12732] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 532.631488][T12732] attempt to access beyond end of device [ 532.652686][T12732] loop3: rw=2049, want=79, limit=63 [ 532.675383][T12732] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 532.697241][T12732] attempt to access beyond end of device [ 532.712427][T12732] loop3: rw=2049, want=80, limit=63 [ 532.725129][T12732] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 532.751367][T12732] attempt to access beyond end of device 13:09:13 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 13:09:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 532.781654][T12732] loop3: rw=2049, want=81, limit=63 [ 532.792160][T12732] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 532.816319][T12742] attempt to access beyond end of device [ 532.822052][T12742] loop3: rw=2049, want=78, limit=63 [ 532.845511][T12742] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e", [[], [], [], []]}, 0x9eb) [ 532.956415][ T26] audit: type=1804 audit(1587301753.940:69): pid=12751 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/246/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 533.230685][T12757] attempt to access beyond end of device [ 533.257099][T12757] loop3: rw=2049, want=78, limit=63 [ 533.292302][T12757] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) [ 533.346124][T12757] attempt to access beyond end of device [ 533.351818][T12757] loop3: rw=2049, want=79, limit=63 13:09:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 533.397814][T12757] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 533.436593][T12757] attempt to access beyond end of device [ 533.455934][T12757] loop3: rw=2049, want=80, limit=63 [ 533.472220][T12757] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 533.487630][T12757] attempt to access beyond end of device [ 533.493580][T12757] loop3: rw=2049, want=81, limit=63 [ 533.504847][T12757] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 533.519270][T12757] attempt to access beyond end of device [ 533.520041][ T26] audit: type=1804 audit(1587301754.500:70): pid=12765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/247/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 533.528265][T12757] loop3: rw=2049, want=130, limit=63 [ 533.561127][T12762] attempt to access beyond end of device [ 533.575492][T12762] loop3: rw=2049, want=78, limit=63 [ 533.602936][T12762] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x91, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 13:09:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9eb) 13:09:16 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 13:09:16 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 13:09:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 535.511974][T12783] attempt to access beyond end of device [ 535.526906][T12783] loop3: rw=2049, want=78, limit=63 [ 535.541364][T12783] attempt to access beyond end of device [ 535.553207][T12783] loop3: rw=2049, want=79, limit=63 [ 535.559304][T12783] attempt to access beyond end of device [ 535.565958][T12783] loop3: rw=2049, want=80, limit=63 [ 535.571305][ T26] audit: type=1804 audit(1587301756.551:71): pid=12787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/248/cgroup.controllers" dev="sda1" ino=16354 res=1 [ 535.597073][T12783] attempt to access beyond end of device [ 535.603188][T12783] loop3: rw=2049, want=81, limit=63 [ 535.608997][T12783] attempt to access beyond end of device [ 535.615518][T12783] loop3: rw=2049, want=130, limit=63 [ 535.639337][T12783] attempt to access beyond end of device [ 535.649778][T12783] loop3: rw=2049, want=78, limit=63 13:09:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9eb) 13:09:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) [ 535.894283][T12802] attempt to access beyond end of device [ 535.904773][ T26] audit: type=1804 audit(1587301756.891:72): pid=12807 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/249/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 535.939596][T12802] loop3: rw=2049, want=78, limit=63 [ 535.944859][T12802] attempt to access beyond end of device 13:09:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) [ 536.025002][T12802] loop3: rw=2049, want=79, limit=63 13:09:17 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x0) [ 536.055194][T12802] attempt to access beyond end of device [ 536.060868][T12802] loop3: rw=2049, want=80, limit=63 [ 536.082870][T12802] attempt to access beyond end of device [ 536.109113][T12802] loop3: rw=2049, want=81, limit=63 [ 536.119856][T12809] attempt to access beyond end of device [ 536.134301][T12809] loop3: rw=2049, want=78, limit=63 13:09:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "6e9912cefbad6d2c91f64aade2ec835035976e8b6916bdf11f7a52eec099336f458692227299fd47a0bf8bfb5cca6de936ddcd97a4f0fdee5f0ccd5c54a25ed4501a75160ee873b63d68a9bf550e1b6a3f4c4ea59bad55f253f7be662fb27e7128572571dfd272b6a1fc5523ebea19b85825d7c56869493edecd9641d2949f315f8205e0a8c8a049773323c434ea23a747b46bc997b3a2ce62c71e1863cb8a8ceec14e5a589de9f2b297367cfb7af8e3d38663d2fee672a81d7242856271f64f5b82c567f8c81121afce3e6c2512fc5229154d3bbbb86753e252c062e123af9b6bdb9d29aeb139c18fc4dbf3af2fd7ee2a91c52e095916a9532e6691457d67d47c030ac7d959b7bb6296df2cc0d08032a5878758862d43944e24fce67fb50fd9d3c1ac17f7b748479d4cdc3669064315d7d40a0ecf6325ec21c89e507ae7f79f6beca9943d82115de0c8a7c1a59935bcad5872a33f56ee92cec4472647cf8d923bada79b7db2e8df78889c08bb969042f97b505dd58065539911819ba4df5366a46dae8a06f330bc036f481afda72aa91a3a191d778ad9be4862d951c29a5e2cc2c83d452e55639d3b66b34dd60e38adb7a8140866e717b06dc611bcf7a933243e2e5734084fd7970a4abda711048863cfe5911bc43bb1864c1315d28f3432929b55804b90c520705861ac5214804ca910f6e853eec54748db64ac22921cda31bde8170eed17819f7ce7c4ca83359ad55dd28ae74d70440b00f447d318eff66043435b6835e30654e063f4122a9272429426f791f6502c0540f55dc30aead1c9bddc60cec8d3461efaf0fdc2c9a1efe1cbc65c96818fc6ae22f7157a4972b9a455c0276d51ac83808818712912ca1fc32aa93811b13aa40759cb775ca2ee05d6c98b9dc2f7d3c80512250dde6612c88a437205537a03e28fc9d0cc9dbd5c7b7bc490502705ea401727f2222e60dd049d78116ed9f28348b695f9cce30055806105dc19f3dad99eb8adc2e9fda610628b4915f3bf9d528eb665a08b8f3cb136e8e5d5c639e3648529ba70d84abcb2dc7a47071f17ff33938237767a101e9f0d3b6a5e5040f1d7b7f9e012e1a79d8a00aeb721ba15f460c09f12bf6d263b7a85f558223a83b05e91f3da3e606de514421f76907f16209c36e9a6a0c6d636da2dde1e3150a6433012bcc91ce90df3e1d8fb5a820a6a27df7d994d6181423f31766ce4d58e35f0384a29440223d64acaa45f2cdd18ae9a9440d1a484fff1df22a4f385d6c12fc8fa8241533501e063e604dcaad3996d261dbfeaceb07687c55db13477ed0642d58c60c35770927137f31929d436338f7ef47c0edb6e1869feee703f4a20aceb8cda62c03e31028879909779dc553aef74402c38ca2e5e8edcfa7606f8f8a0fab3cd0e9126aebb8936665b5022fef23ec3bd23cd8c93c29ae41adf9e43844c4e6d62d0cee8ebc4511e574dc4e37f67b728088824bff2ced851d0ae3edc0e55c265ccf7cae9cf667f2bc4dd54dbe93efebf62e5de07ef11efa118a7dd75f6db10dc400d8e4b53f3da5783833ed406853f6b8a78ee20763f7b29ce1396e37190f882a97ff981112b0577da06d33f6fbddca634444a1d8cd53cc6412ae7a288454d91a1e9213599972a835265381a7d68b780f5ffc337b1f90cca34afc2b90aa162406c3bb9dacb734029b53f7cfbd38388d19b3a83ba6debdbe4f1976ee9fba3843b017505274d972b331eb19ae983315e2630e2bb8cb68ea4777e6660047a1832c23c453f5dd80cc4a0a584b978fd4b1afe955dd862f24b78e6b1e21fe07326f82803d44ac0aec22278e8b857afb15d3fd1b51865c8b4cec4a69eb852a1fd724290c7c135e7a9ef75e8b35cf854d0cef315f3835d6a755ea33061adc329a1222163448ba04edf3acda27d93efe5950eda4370c24505c563127a65beee9d2547761623845800021edc05297ccab89e878558424891b8ef37667ffdcf5ef67af36d3b37281e897efabb510860a177229e65e9c88b90c2fb70ce04b1", [[], [], [], []]}, 0x9f6) [ 536.148485][ T26] audit: type=1804 audit(1587301757.131:73): pid=12813 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/250/cgroup.controllers" dev="sda1" ino=16381 res=1 13:09:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) [ 536.408221][T12823] attempt to access beyond end of device [ 536.419267][T12823] loop3: rw=2049, want=78, limit=63 [ 536.426091][T12823] attempt to access beyond end of device [ 536.432064][ T26] audit: type=1804 audit(1587301757.411:74): pid=12822 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/251/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 536.459778][T12823] loop3: rw=2049, want=79, limit=63 [ 536.465384][T12823] attempt to access beyond end of device [ 536.471470][T12823] loop3: rw=2049, want=80, limit=63 [ 536.479418][T12823] attempt to access beyond end of device [ 536.485491][T12823] loop3: rw=2049, want=81, limit=63 [ 536.490976][T12823] attempt to access beyond end of device [ 536.500420][T12823] loop3: rw=2049, want=130, limit=63 [ 536.508728][T12823] attempt to access beyond end of device [ 536.514510][T12823] loop3: rw=2049, want=78, limit=63 13:09:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) 13:09:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x91, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:19 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x0) 13:09:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9f6) 13:09:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:19 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 538.636791][ T26] audit: type=1804 audit(1587301759.621:75): pid=12854 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/252/cgroup.controllers" dev="sda1" ino=16362 res=1 [ 538.662946][T12847] attempt to access beyond end of device [ 538.686823][T12847] loop3: rw=2049, want=78, limit=63 [ 538.692130][T12847] buffer_io_error: 15 callbacks suppressed [ 538.692143][T12847] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 538.708947][T12847] attempt to access beyond end of device [ 538.714856][T12847] loop3: rw=2049, want=79, limit=63 [ 538.720299][T12847] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 538.733239][T12847] attempt to access beyond end of device [ 538.739197][T12847] loop3: rw=2049, want=80, limit=63 [ 538.744443][T12847] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 538.756123][T12847] attempt to access beyond end of device [ 538.770386][T12847] loop3: rw=2049, want=81, limit=63 [ 538.782716][T12847] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 538.806788][T12847] attempt to access beyond end of device 13:09:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 538.835685][T12847] loop3: rw=2049, want=130, limit=63 [ 538.862633][T12860] attempt to access beyond end of device [ 538.869054][T12860] loop3: rw=2049, want=78, limit=63 [ 538.891958][T12860] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:19 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 13:09:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9f6) [ 539.075473][ T26] audit: type=1804 audit(1587301760.061:76): pid=12864 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/253/cgroup.controllers" dev="sda1" ino=16352 res=1 13:09:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 13:09:20 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x0) [ 539.265618][T12872] attempt to access beyond end of device [ 539.271390][T12872] loop3: rw=2049, want=78, limit=63 [ 539.276990][T12872] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 539.285774][T12872] attempt to access beyond end of device [ 539.291707][T12872] loop3: rw=2049, want=79, limit=63 [ 539.297300][T12872] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 539.306184][T12872] attempt to access beyond end of device [ 539.312200][T12872] loop3: rw=2049, want=80, limit=63 [ 539.317866][T12872] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 539.327052][T12872] attempt to access beyond end of device [ 539.332962][T12872] loop3: rw=2049, want=81, limit=63 [ 539.339613][T12872] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 539.348697][T12872] attempt to access beyond end of device [ 539.354487][T12872] loop3: rw=2049, want=130, limit=63 13:09:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9fc) [ 539.365149][T12872] attempt to access beyond end of device [ 539.371150][T12872] loop3: rw=2049, want=78, limit=63 [ 539.376979][T12872] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 539.421143][ T26] audit: type=1804 audit(1587301760.401:77): pid=12879 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/254/cgroup.controllers" dev="sda1" ino=16369 res=1 13:09:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xb0343aabd1184b87}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 539.725117][T12886] attempt to access beyond end of device [ 539.773693][T12886] loop3: rw=2049, want=78, limit=63 [ 539.805150][T12886] attempt to access beyond end of device [ 539.818215][T12886] loop3: rw=2049, want=79, limit=63 [ 539.830240][T12886] attempt to access beyond end of device [ 539.843044][T12886] loop3: rw=2049, want=80, limit=63 [ 539.854584][T12886] attempt to access beyond end of device [ 539.867830][T12886] loop3: rw=2049, want=81, limit=63 [ 539.873437][ T26] audit: type=1804 audit(1587301760.851:78): pid=12891 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir086056242/syzkaller.NH6Gnw/255/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 539.899743][T12886] attempt to access beyond end of device [ 539.906948][T12886] loop3: rw=2049, want=130, limit=63 [ 539.912956][T12892] attempt to access beyond end of device [ 539.919098][T12892] loop3: rw=2049, want=78, limit=63 13:09:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x91, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:22 executing program 4: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setns(r0, 0x0) 13:09:22 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) dup3(r1, r0, 0x0) 13:09:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9fc) 13:09:22 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket(0x22, 0x3, 0xa) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000), 0xb, 0x0) socket(0x10, 0x0, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) 13:09:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000200)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="baa100b000eef36cba21000f20e06635000001000f22e066b9800000c00f326635001000000f30bad104ecc80080d267d9f866b9800000c00f326635000400000f300f20c06635200000000f22c067f3af", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], 0x0, 0x5211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 541.722909][T12916] attempt to access beyond end of device [ 541.790674][T12916] loop3: rw=2049, want=78, limit=63 13:09:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}}}, 0xe8) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0}}], 0x4000000000000e5, 0x0) [ 541.826699][T12916] attempt to access beyond end of device [ 541.857637][T12916] loop3: rw=2049, want=79, limit=63 [ 541.879761][T12916] attempt to access beyond end of device [ 541.894976][T12916] loop3: rw=2049, want=80, limit=63 [ 541.907187][T12916] attempt to access beyond end of device [ 541.924652][T12916] loop3: rw=2049, want=81, limit=63 13:09:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) [ 541.939015][T12916] attempt to access beyond end of device [ 541.950650][T12916] loop3: rw=2049, want=130, limit=63 [ 541.965628][T12931] attempt to access beyond end of device [ 541.971452][T12931] loop3: rw=2049, want=78, limit=63 13:09:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x7}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0xf98, 0x2c, 0x0, @local, @mcast2={0x0}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "953adf153c8e6a8f06e8eb49e87ac102b9de933342d4289e92cb02dce61aaf08452798070cb29e428214a2cf79b298a569d52ce5b1acd1701b8d6d12c873b04696fccadba2f303949ae1ed522d21d4f4e931903bc5373d97f1b3c83d5d417f8187dc9a379ff4c03abeee601f4c199a1ff2a4f87dfd75cdac102e77953c3996053a646afdcc817937"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "7ccd"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) 13:09:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9fc) 13:09:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000070601082c0000000000000000000003050001000600000008000640000067ec86736083c9d834ec19f6ebb2850832e9b232b1be2139dac38db3be8a7e584232af1ea762570d6c2d6bd17a63468b2fa7f5b99d000000000000000077e0b787b5243519bfa3b9f17846ff00b4adace6400f1e96779ff69927768f2941fb0206512014e0eae8dbce5fe17b559f5f9e12c9a8f79fe3c35b8c1e9199b558df1c92904d114f8352e89c3d8808521bea4052a8c1af08044dfeee25a9dcc68b977d9bdaaecfe1c40e0ae5eacf460c7cdcf38ee9ad072aed5e993503b991e95dc06fe0973871114a149957d5c6dbf26c10a4a80960827277da7ec39c2ea12ec7b6f2a7c0deebfa9c1d08d408a41b29fd93c35f97600c626ba47e07000000535e3959139e2ac4bff43e50e06d66a1b24089f9da7b3b87cb2dcade282e2383fd08d3130d9540e827300a40c8dce12d2c571024a11d9be802038f075c6959cc4c123843b72ed18d3d88f2147926039cd858fe177882fe203d5660ea88693fb56a23c71022995c14bae89895b190b136fa528f9123416462563f9966aba68239eb70fcc2c5d91e5626d9c551570565b02268061874d8fee15fb6d78a41425668f26af49b391b98d47947f9c85709d43ccf957abe8a8ac9a6af3cc8c34742f08c8e1cec68000a55bb699ed3c6cb40c2035e14ec31c0b2a5795214ca6eb16be0828bbbad96d50158b99705dc1ad41619acf9a6a4440ce4642c3291dcc74f497e8fc89239555c19a4649afbaf11b9fbafb870723d244bec1153e490ea149a88ebbca1c0f32af6b4672eff533c379e143301983806bfe19f605ba55bd92d19534fcaf2a9fe00000000000000075013771c32a664641e8a612d8a216108d731659ee57b5aa329835febbafec3ef11707e7036840df726626c742184449b1e00dbd6b46feb045a8abb06193781628f893c0c0401d25f93e65ec2e581daab81b4e78ff1fc0deabb0fc636c0c3a9b88b5f43274024193736284d5c983f7169af2137c70a7e74b0f03a30f3001f8d97a50451a5a36f1cc405c464f4c8db02b0c294220fe167f9f831e3c75d067c907f311e108b379848ae2fe605a605b9a3dfe1cb336cb7033245d21a5074cddfebb44ca2340cc65d3a7c2468976f21eb7dae9279bb08c8b47c138c5a370efb23ad51bc0e649980669615663c2f0ee5ea13ce0aaf0d679e5752749191abfa1e9ba0546466c048390f891497adef88a7474108d6246b9d649c507e95f3dc62d62d8d87898f90630510fc64f6e2f633060acd14e5f04075eb332d1b78a7f9e79d6395e3c4fb3d1f301c2dffabf6b2bacfdf6898488b14a1544251a7a077da08ba1de78d74189b857ca4270c7be74db206aa5c70f1c3395e391c330563a8a5b5cdac67e9376a3c39e90f665e01d0f53735bf995cc682e675102078d71aa91bd5ae3b275dfd3cdd4976c120f5877500543f89ff526a9028eb7955a0076606833c71c22d96a379c80d28c6adec13682a62a6c24c000000000000000000b44eb74d5528ebc558c0db7b83e291d96cd0078e9324d1850ebfd7f35b614a98a6035c401b4dae208f341452b5f58e06e460febc39f31c5933028d0caf2fbac2ae61b97ef94e83cd38709d16f0f5e8ee167bbe04a230966b30ea8d0563009f66dfde0f9be42e4eb6776a8d8b54b269a8029e3d5a7f6ee69d2d4e1896a9f081b3b128b056691b9a9c310a6720f179d3948d0b6336b30d5b18134f550560fa2a9caa1e5c67eee2c48b3e7860cf2773e222608f34953053f25a19cbb54ab43656522f39c903d1760b6ab8529d33fedf802fca98abef57f36f95086b5c1fe2ab12351f72e875dff50fb5763af5c2b3d85d4ebe0e2aaed84822d7996732be3984fc"], 0x24}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) [ 542.233095][T12964] attempt to access beyond end of device [ 542.258320][T12964] loop3: rw=2049, want=78, limit=63 [ 542.274294][T12964] attempt to access beyond end of device [ 542.299660][T12964] loop3: rw=2049, want=79, limit=63 [ 542.306045][T12964] attempt to access beyond end of device [ 542.312039][T12964] loop3: rw=2049, want=80, limit=63 [ 542.324140][T12964] attempt to access beyond end of device [ 542.364620][T12964] loop3: rw=2049, want=81, limit=63 [ 542.387158][T12981] attempt to access beyond end of device [ 542.394636][T12981] loop3: rw=2049, want=78, limit=63 13:09:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @random="7e7f0304b23e", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}}}}}}, 0x0) 13:09:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9ff) 13:09:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2c020000) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x127f, 0x0) msgctl$IPC_RMID(r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:09:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 13:09:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x98, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 544.737469][T12998] attempt to access beyond end of device [ 544.743619][T12998] loop3: rw=2049, want=78, limit=63 [ 544.749078][T12998] buffer_io_error: 15 callbacks suppressed [ 544.749089][T12998] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 544.763602][T12998] attempt to access beyond end of device [ 544.770401][T12998] loop3: rw=2049, want=79, limit=63 [ 544.775674][T12998] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 544.784703][T12998] attempt to access beyond end of device [ 544.790380][T12998] loop3: rw=2049, want=80, limit=63 [ 544.796209][T12998] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 544.805111][T12998] attempt to access beyond end of device [ 544.810764][T12998] loop3: rw=2049, want=81, limit=63 [ 544.816037][T12998] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 544.824559][T12998] attempt to access beyond end of device [ 544.830297][T12998] loop3: rw=2049, want=130, limit=63 13:09:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @random="7e7f0304b23e", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}}}}}}, 0x0) 13:09:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x1000000002, 0x70, 0x1a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 544.848065][T12998] attempt to access beyond end of device [ 544.853775][T12998] loop3: rw=2049, want=78, limit=63 [ 544.875315][T12998] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9ff) 13:09:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @random="7e7f0304b23e", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}}}}}}, 0x0) [ 545.097883][T13020] attempt to access beyond end of device [ 545.144374][T13020] loop3: rw=2049, want=78, limit=63 [ 545.151160][T13020] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 545.169318][T13020] attempt to access beyond end of device [ 545.175809][T13020] loop3: rw=2049, want=79, limit=63 [ 545.181905][T13020] Buffer I/O error on dev loop3, logical block 78, lost async page write 13:09:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1000004001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$IPC_RMID(0x0, 0x0) [ 545.191467][T13020] attempt to access beyond end of device [ 545.199100][T13020] loop3: rw=2049, want=80, limit=63 [ 545.205716][T13020] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 545.216145][T13020] attempt to access beyond end of device [ 545.223237][T13020] loop3: rw=2049, want=81, limit=63 13:09:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @random="7e7f0304b23e", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}}}}}}, 0x0) [ 545.240900][T13020] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 545.258358][T13020] attempt to access beyond end of device [ 545.266302][T13020] loop3: rw=2049, want=130, limit=63 [ 545.284841][T13029] attempt to access beyond end of device [ 545.290854][T13029] loop3: rw=2049, want=78, limit=63 [ 545.297642][T13029] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x4000c3, &(0x7f0000000140)) 13:09:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0x9ff) 13:09:28 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@remote}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 13:09:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x98, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 547.811986][T13051] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 547.852504][T13053] attempt to access beyond end of device [ 547.864995][T13053] loop3: rw=2049, want=78, limit=63 [ 547.876930][T13053] attempt to access beyond end of device [ 547.888295][T13053] loop3: rw=2049, want=79, limit=63 [ 547.900476][T13053] attempt to access beyond end of device [ 547.911847][T13053] loop3: rw=2049, want=80, limit=63 [ 547.923919][T13053] attempt to access beyond end of device [ 547.935312][T13053] loop3: rw=2049, want=81, limit=63 [ 547.947573][T13053] attempt to access beyond end of device [ 547.953388][T13053] loop3: rw=2049, want=130, limit=63 [ 547.962447][T13053] attempt to access beyond end of device [ 547.968502][T13053] loop3: rw=2049, want=78, limit=63 13:09:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa00) 13:09:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) [ 548.058813][T13062] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 548.124932][T13051] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 13:09:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='syz0\x00', 0xfffffffffffffffd) 13:09:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 548.301925][T13080] attempt to access beyond end of device [ 548.307813][T13080] loop3: rw=2049, want=78, limit=63 [ 548.313235][T13080] attempt to access beyond end of device [ 548.322877][T13080] loop3: rw=2049, want=79, limit=63 [ 548.340754][T13080] attempt to access beyond end of device [ 548.356900][T13080] loop3: rw=2049, want=80, limit=63 [ 548.362971][T13080] attempt to access beyond end of device [ 548.372122][T13080] loop3: rw=2049, want=81, limit=63 [ 548.377695][T13080] attempt to access beyond end of device [ 548.383569][T13080] loop3: rw=2049, want=130, limit=63 13:09:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xfffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffd, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 13:09:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa00) [ 548.406433][T13080] attempt to access beyond end of device [ 548.410496][T13088] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 548.412110][T13080] loop3: rw=2049, want=78, limit=63 [ 548.461565][T13088] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 548.638829][T13095] attempt to access beyond end of device [ 548.649303][T13095] loop3: rw=2049, want=78, limit=63 [ 548.655362][T13095] attempt to access beyond end of device [ 548.661008][T13095] loop3: rw=2049, want=79, limit=63 [ 548.667014][T13095] attempt to access beyond end of device [ 548.673171][T13095] loop3: rw=2049, want=80, limit=63 [ 548.679146][T13095] attempt to access beyond end of device [ 548.685328][T13095] loop3: rw=2049, want=81, limit=63 [ 548.690654][T13095] attempt to access beyond end of device [ 548.696972][T13095] loop3: rw=2049, want=130, limit=63 [ 548.704584][T13095] attempt to access beyond end of device [ 548.710232][T13095] loop3: rw=2049, want=78, limit=63 13:09:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xfffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffd, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 13:09:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x50}}, 0x0) 13:09:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 13:09:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x98, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], []]}, 0xa00) 13:09:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 550.934295][T13117] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 550.937182][T13113] attempt to access beyond end of device [ 550.996660][T13113] loop3: rw=2049, want=78, limit=63 [ 551.003327][T13126] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:09:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xfffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffd, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 551.041507][T13113] buffer_io_error: 15 callbacks suppressed [ 551.041519][T13113] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:32 executing program 1: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) [ 551.103116][T13113] attempt to access beyond end of device [ 551.120706][T13113] loop3: rw=2049, want=79, limit=63 [ 551.132786][T13113] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 551.147884][T13113] attempt to access beyond end of device 13:09:32 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) [ 551.169310][T13113] loop3: rw=2049, want=80, limit=63 [ 551.182312][T13113] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 551.195606][T13113] attempt to access beyond end of device 13:09:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xfffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffd, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 13:09:32 executing program 1: set_mempolicy(0x1, &(0x7f0000000180)=0x9, 0x6) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 551.217335][T13113] loop3: rw=2049, want=81, limit=63 [ 551.229903][T13113] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 551.253905][T13131] attempt to access beyond end of device [ 551.259643][T13131] loop3: rw=2049, want=78, limit=63 [ 551.276664][T13131] Buffer I/O error on dev loop3, logical block 77, lost async page write 13:09:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x92, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x28, &(0x7f0000000200)={0x2, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @multicast1}}}, 0x104) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) ioperm(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x300, 0x0, 0x0) 13:09:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r1, 0x803) write$binfmt_elf32(r2, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], []]}, 0x901) 13:09:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000007060500000000000000000000000000050001000600000008000640000000034379bff3a322dedd21915dcc4beb3b4d0580d1aaea6678e49b99cb5bf8f9a58b0ca89a"], 0x24}}, 0x0) 13:09:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xfffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) shutdown(r0, 0x1) 13:09:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xe4, &(0x7f0000000200)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc70e407be5025def08eb2b5c9a61aabdaecf71e3a142a33caa6d0e35475ace78a33eb2b7fc54c930ef9bd691505f5467b51fe7fb5b2a250df97c682ef2210fed2ff61d959e82a01377b51eedaa1a51148ef7222fa7ee7ec1ebb337e141c5d953e89d92c905dc8db4e2e54083dd47e5e5b04d16f43d01d157c08de6aa9e88dedc6f4ce7498b010000001228fe539f954a4952f7518b384d51458209bd02000000000000004ead7ab71f4864dcd57b4a8be288c1c4fb549ca9e02e0000000000000000007357290a1b097f6220d7"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 13:09:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) [ 553.999826][T13158] attempt to access beyond end of device [ 554.029214][T13158] loop3: rw=2049, want=78, limit=63 13:09:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xfffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) shutdown(r0, 0x1) 13:09:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x0, 0x0) dup3(r1, r0, 0x0) fchdir(r0) [ 554.060909][T13158] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 554.070512][T13169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 554.102927][T13158] attempt to access beyond end of device 13:09:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xfffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) shutdown(r0, 0x1) [ 554.117499][T13158] loop3: rw=2049, want=79, limit=63 [ 554.135188][T13158] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 554.159851][T13158] attempt to access beyond end of device [ 554.173813][T13158] loop3: rw=2049, want=80, limit=63 [ 554.187158][T13158] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 554.208190][T13158] attempt to access beyond end of device 13:09:35 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x5452, &(0x7f0000000080)) 13:09:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0xd9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xfffffffb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140)=0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffd, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 554.224146][T13158] loop3: rw=2049, want=81, limit=63 [ 554.238123][T13158] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 554.272466][T13158] ================================================================== [ 554.280635][T13158] BUG: KCSAN: data-race in __mpage_writepage / truncate_setsize [ 554.288777][T13158] [ 554.291120][T13158] write to 0xffff88811d1cccb8 of 8 bytes by task 13173 on cpu 1: [ 554.298845][T13158] truncate_setsize+0x34/0x80 [ 554.303875][T13158] fat_setattr+0x7c5/0x810 [ 554.308561][T13158] notify_change+0x82b/0xad0 [ 554.313157][T13158] do_truncate+0xf9/0x180 [ 554.317522][T13158] do_sys_ftruncate+0x315/0x340 [ 554.322467][T13158] __x64_sys_ftruncate+0x3c/0x50 [ 554.327409][T13158] do_syscall_64+0xc7/0x3b0 [ 554.331947][T13158] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.337827][T13158] [ 554.340164][T13158] read to 0xffff88811d1cccb8 of 8 bytes by task 13158 on cpu 0: [ 554.347809][T13158] __mpage_writepage+0xb5/0xdc0 [ 554.352665][T13158] write_cache_pages+0x400/0xa10 [ 554.357618][T13158] mpage_writepages+0xab/0x180 [ 554.362406][T13158] fat_writepages+0x2a/0x40 [ 554.367018][T13158] do_writepages+0x6b/0x170 [ 554.371633][T13158] __filemap_fdatawrite_range+0x1bb/0x220 [ 554.377365][T13158] file_write_and_wait_range+0xfb/0x160 [ 554.382921][T13158] __generic_file_fsync+0x55/0x180 [ 554.388046][T13158] fat_file_fsync+0x54/0x120 [ 554.392647][T13158] vfs_fsync_range+0x7c/0x150 [ 554.397350][T13158] generic_file_write_iter+0x31c/0x38e [ 554.402832][T13158] new_sync_write+0x303/0x400 [ 554.407517][T13158] __vfs_write+0x9e/0xb0 [ 554.411765][T13158] vfs_write+0x189/0x380 [ 554.416008][T13158] ksys_write+0xc5/0x1a0 [ 554.420349][T13158] __x64_sys_write+0x49/0x60 [ 554.424955][T13158] do_syscall_64+0xc7/0x3b0 [ 554.429658][T13158] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.435638][T13158] [ 554.437986][T13158] Reported by Kernel Concurrency Sanitizer on: [ 554.444149][T13158] CPU: 0 PID: 13158 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0 [ 554.453520][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.463581][T13158] ================================================================== [ 554.472216][T13158] Kernel panic - not syncing: panic_on_warn set ... [ 554.479176][T13158] CPU: 0 PID: 13158 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0 [ 554.487936][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.498687][T13158] Call Trace: [ 554.502161][T13158] dump_stack+0x11d/0x187 [ 554.506803][T13158] panic+0x210/0x640 [ 554.510961][T13158] ? vprintk_func+0x89/0x13a [ 554.515842][T13158] kcsan_report.cold+0xc/0x1a [ 554.520980][T13158] kcsan_setup_watchpoint+0x3fb/0x440 [ 554.526561][T13158] __mpage_writepage+0xb5/0xdc0 [ 554.531516][T13158] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 554.537875][T13158] ? __read_once_size+0x45/0xd0 [ 554.543482][T13158] ? __this_cpu_preempt_check+0x3c/0x130 [ 554.549570][T13158] ? __mod_memcg_state+0x85/0x110 [ 554.555317][T13158] ? __this_cpu_preempt_check+0x3c/0x130 [ 554.560979][T13158] ? __this_cpu_preempt_check+0x3c/0x130 [ 554.566651][T13158] ? __rcu_read_unlock+0x77/0x390 [ 554.571709][T13158] ? percpu_counter_add_batch+0x10f/0x140 [ 554.577442][T13158] ? clear_page_dirty_for_io+0x12e/0x520 [ 554.583632][T13158] write_cache_pages+0x400/0xa10 [ 554.588850][T13158] ? clean_buffers+0x1a0/0x1a0 [ 554.593637][T13158] ? __xa_set_mark+0xe7/0x110 [ 554.598369][T13158] ? __rcu_read_unlock+0x77/0x390 [ 554.603402][T13158] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 554.609359][T13158] ? __write_once_size+0x2f/0xd0 [ 554.614424][T13158] ? fat_add_cluster+0xd0/0xd0 [ 554.619213][T13158] ? fat_readpages+0x50/0x50 [ 554.623818][T13158] mpage_writepages+0xab/0x180 [ 554.628601][T13158] ? fat_add_cluster+0xd0/0xd0 [ 554.633403][T13158] fat_writepages+0x2a/0x40 [ 554.637922][T13158] do_writepages+0x6b/0x170 [ 554.642468][T13158] ? _raw_spin_unlock+0x38/0x60 [ 554.647334][T13158] ? wbc_attach_and_unlock_inode+0xdd/0x3b0 [ 554.653691][T13158] __filemap_fdatawrite_range+0x1bb/0x220 [ 554.659553][T13158] file_write_and_wait_range+0xfb/0x160 [ 554.665115][T13158] __generic_file_fsync+0x55/0x180 [ 554.670279][T13158] fat_file_fsync+0x54/0x120 [ 554.674913][T13158] ? fat_free_clusters.cold+0x3a/0x3a [ 554.680389][T13158] vfs_fsync_range+0x7c/0x150 [ 554.685286][T13158] generic_file_write_iter+0x31c/0x38e [ 554.691130][T13158] new_sync_write+0x303/0x400 [ 554.695908][T13158] __vfs_write+0x9e/0xb0 [ 554.700193][T13158] vfs_write+0x189/0x380 [ 554.704639][T13158] ksys_write+0xc5/0x1a0 [ 554.709176][T13158] __x64_sys_write+0x49/0x60 [ 554.714554][T13158] do_syscall_64+0xc7/0x3b0 [ 554.719176][T13158] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.725169][T13158] RIP: 0033:0x45c829 [ 554.729248][T13158] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 554.748972][T13158] RSP: 002b:00007f9b74c24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 554.759836][T13158] RAX: ffffffffffffffda RBX: 000000000050bfc0 RCX: 000000000045c829 [ 554.768859][T13158] RDX: 00000000000010a9 RSI: 0000000020000980 RDI: 0000000000000005 [ 554.777017][T13158] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 554.785296][T13158] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 554.793389][T13158] R13: 0000000000000cd4 R14: 00000000004cefdf R15: 00007f9b74c256d4 [ 554.804193][T13158] Kernel Offset: disabled [ 554.808634][T13158] Rebooting in 86400 seconds..